xt777 Privacy
Policy

xt777 ("xt777", "we", "us", "our") operates the online casino and sports betting platform accessible at https://xt777.bio, together with all associated mobile-optimised interfaces, sub-domains, applications, and services offered under the xt777 brand. xt777 is the data controller in respect of the personal information collected from users of the platform.

This Privacy Policy applies to all visitors to the xt777 website and to all registered account holders, including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every other city and town across Pakistan. It governs the collection, use, storage, sharing, and protection of your personal data in connection with your use of the xt777 platform.

xt777 collects personal data from you in two primary ways: information you provide directly to us, and information we collect automatically when you use the platform. The categories of data we collect include:

xt777 does not knowingly collect sensitive personal data beyond what is required for identity verification and regulatory compliance purposes. We do not collect biometric data, health information, or data relating to religious or political beliefs.

xt777 uses the personal data we collect for clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which xt777 processes your personal data are:

• Account Management: To create, maintain, verify, and administer your xt777 player account, including processing your registration, verifying your identity and age, and managing account security settings.
• Transaction Processing: To process your deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other approved payment channels. Financial data is also used for anti-money laundering (AML) monitoring and fraud detection.
• Platform Provision: To deliver the xt777 gaming and sports betting services to you, including cricket betting markets, PSL odds, live dealer games, jackpot slots, the Mines instant game, and all other features of the platform.
• Responsible Gaming Compliance: To monitor your gaming activity for indicators of problem gambling behaviour, enforce deposit and loss limits you have set, and apply any self-exclusion or cooling-off periods you have requested. These obligations are non-negotiable and cannot be opted out of.
• Regulatory Compliance: To meet xt777's obligations under applicable international gaming regulations, including know-your-customer (KYC) obligations, anti-money laundering requirements, and the record-keeping obligations imposed by our gaming licence.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance related to your use of the xt777 platform.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about xt777 bonuses, PSL betting promotions, Eid offers, free spins, and other marketing content relevant to your interests. You may opt out of marketing communications at any time via the notification preferences section of your account settings.
• Platform Improvement: To analyse aggregate usage patterns, game performance data, and technical error logs in order to improve the quality, security, and reliability of the xt777 platform.

xt777 processes your personal data only where a valid legal basis exists to do so. The legal bases on which xt777 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between you and xt777 — namely, the provision of the gaming platform and associated services described in the Terms and Conditions. This includes account creation, transaction processing, game delivery, and customer support.
• Legal Obligation: Processing that is required to comply with xt777's legal and regulatory obligations, including KYC verification, AML monitoring, age verification, responsible gaming requirements, and record retention under applicable gaming licensing conditions.
• Legitimate Interests: Processing that is necessary for xt777's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, internal analytics, and business development activities.
• Consent: Processing based on your freely given, specific, and informed consent — principally the sending of marketing communications and the use of non-essential cookies. You may withdraw consent for these activities at any time without affecting the lawfulness of processing carried out prior to withdrawal.

xt777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients where strictly necessary and under appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers engaged by xt777 to process deposits and withdrawals. These providers receive only the minimum data necessary to process your specific transaction.
• Identity Verification Providers: Third-party KYC and age verification service providers who assist xt777 in confirming the identity, age, and legitimacy of account holders. These providers are bound by strict confidentiality obligations.
• Fraud Prevention & Security Services: Specialist providers engaged to detect, investigate, and prevent fraudulent activity, money laundering, and other forms of platform abuse. Data shared with these providers is used solely for the stated security purposes.
• Regulatory Authorities: Gaming regulatory bodies, law enforcement agencies, and other government authorities where xt777 is legally required to disclose personal data — for example, pursuant to a court order, regulatory investigation, or statutory reporting obligation.
• Technology & Infrastructure Partners: Cloud hosting providers, platform infrastructure vendors, and software development partners who process personal data on behalf of xt777 as data processors under written data processing agreements that require them to maintain appropriate security and confidentiality standards.

All third parties to whom xt777 discloses personal data are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law. xt777 remains responsible for the personal data it shares with third-party processors and conducts periodic reviews of those relationships.

The xt777 platform uses cookies and similar tracking technologies including web beacons, pixel tags, and local storage objects. These technologies serve the following purposes:

• Strictly Necessary Cookies: These are essential for the core functioning of the xt777 platform. They enable you to log in to your account, maintain your session during active play, and access secure areas of the site. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies: These remember your preferences such as your selected language, preferred currency display (PKR), and responsible gaming limit settings, so that you do not need to reset them on every visit.
• Analytics Cookies: These help xt777 understand how players interact with the platform — including which game categories are most popular, where players encounter technical difficulties, and how navigation flows through the site. This data is used in aggregated, anonymised form to improve the platform.
• Marketing & Retargeting Cookies: Where you have consented to marketing communications, these cookies help xt777 deliver relevant promotional content about cricket betting markets, bonus offers, and PSL events. You can withdraw consent for these cookies via your browser settings or by adjusting your notification preferences within your xt777 account.

Most web browsers allow you to control cookies through the browser settings. Disabling certain categories of cookies may limit your ability to use some features of the xt777 platform. xt777 does not respond to browser "Do Not Track" signals at this time, as there is no industry-standard interpretation of that signal.

xt777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with your active xt777 account is retained for the duration of the account relationship and for a period of five (5) years following the permanent closure of your account.
• Financial Transaction Records: Records of deposits, withdrawals, and in-game transactions in PKR are retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering record-keeping requirements applicable to gaming operators.
• KYC Documentation: Identity verification documents including CNIC copies and verification records are retained for a minimum of five (5) years following the conclusion of the account relationship, or longer where required by applicable law.
• Customer Support Records: Live chat transcripts, support ticket records, and email correspondence are retained for three (3) years from the date of the interaction, or for the duration required to resolve any open dispute.
• Marketing Consent Records: Records of your marketing opt-in and opt-out preferences are retained for the duration of your account relationship and for three (3) years thereafter, to demonstrate compliance with our consent obligations.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with xt777's internal data disposal procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

Subject to applicable data protection law and the limitations described below, you have the following rights in respect of your personal data held by xt777:

• Right of Access: You have the right to request a copy of the personal data xt777 holds about you, together with information about how it is being processed. We will respond to access requests within 30 days of receipt.
• Right to Rectification: You have the right to request that xt777 correct any inaccurate or incomplete personal data we hold about you. You can update basic account information such as your email address and mobile number directly via the account settings section of the platform.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where xt777 is required to retain data to fulfil its legal and regulatory obligations, including AML record-keeping and gaming licence compliance requirements.
• Right to Restrict Processing: You may request that xt777 restrict the processing of your personal data in circumstances where the accuracy of the data is contested, where processing is unlawful, or where you have objected to processing pending verification of xt777's legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on xt777's legitimate interests. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

xt777 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xt777 platform, ensuring that your login credentials, financial transactions, and personal information cannot be intercepted in transit.
• Two-factor authentication (2FA) available to all xt777 account holders via their registered Pakistani mobile number, providing an additional layer of protection against unauthorised account access.
• Role-based access controls limiting internal access to personal data to those members of the xt777 team who require it to perform their specific job functions. Access logs are maintained and reviewed regularly.
• Regular penetration testing and vulnerability assessments of the xt777 platform infrastructure, conducted by qualified independent security professionals.
• Encrypted storage of all personal and financial data held on xt777 servers, with regular encrypted backups maintained in geographically separate secure facilities.
• A formal data breach response procedure, which includes the obligation to notify affected players and relevant regulatory authorities in the event of a security incident meeting the threshold for mandatory notification under applicable law.

While xt777 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You also play an important role in keeping your account secure by maintaining the confidentiality of your login credentials and enabling two-factor authentication on your xt777 account.

As an internationally licensed gaming operator, xt777 may transfer your personal data to countries outside Pakistan in connection with the storage, processing, and use of that data by xt777 and its authorised third-party service providers. Such transfers may occur in connection with cloud hosting infrastructure, identity verification services, payment processing systems, and the operation of the gaming platform itself.

Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection to that available under internationally recognised standards, xt777 takes appropriate safeguards to ensure that the transfer is conducted lawfully and that your data continues to be protected. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with the receiving party.
• Binding corporate rules where data is transferred within the xt777 group of companies.
• Adequacy decisions or equivalent mechanisms recognised by applicable data protection law in the jurisdiction governing xt777's data processing activities.

You may request further information about the international transfer safeguards applied by xt777 by contacting our data protection team via the platform's live chat or support email address.

The xt777 platform is strictly intended for persons aged 21 years or older. xt777 does not knowingly collect personal data from individuals under the age of 21, and does not permit persons under that age to register for, access, or use the platform in any capacity.

If xt777 discovers or is notified that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data, and return any funds deposited by that individual to the payment method from which they originated, in accordance with our underage gambling policy.

xt777 conducts age verification checks at registration and at the point of first withdrawal, and may request documentary proof of age — including a copy of a Pakistani CNIC or passport — at any point during the account relationship. Providing false information about your age is a breach of the xt777 Terms and Conditions and may result in account closure and forfeiture of balances.

xt777 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the expansion of our platform's features and services. The date on which this Privacy Policy was most recently revised is displayed at the top of this document.

Where changes to this Privacy Policy are material — meaning they substantively affect the way in which xt777 collects, uses, or shares your personal data — we will notify registered account holders via the email address associated with their xt777 account, or via an in-platform notification, at least seven (7) days before the revised policy takes effect.

For minor, non-material changes such as typographical corrections, clarifications of existing provisions, or structural reorganisation that does not alter the substance of our data practices, the revised Privacy Policy will be published on the xt777 website without advance notification. Your continued use of the xt777 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed about how xt777 protects your data. If you disagree with any revision to this Privacy Policy, you should cease using the platform and may contact our customer support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way xt777 handles your personal data, please do not hesitate to get in touch with our data protection team. We are committed to addressing all privacy-related enquiries promptly and transparently.

You can reach the xt777 data protection team through the following channels:

• Live Chat: Available directly on the xt777 platform, 24 hours a day, 7 days a week. This is the fastest way to reach our support and compliance teams.
• Email: [email protected] — please include "Privacy Enquiry" in the subject line of your message so that your email is directed to the appropriate team member.

xt777 values the trust that Pakistani players place in us when they share their personal information. We treat that trust as a serious obligation and are committed to handling your data with the care, transparency, and respect it deserves.