Privacy Policy
— xxx777 Platform

xxx777 ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of all individuals who access or use the xxx777 website at https://xxx777.cam ("the Service"). This Privacy Policy ("Policy") describes how we collect, use, process, store, share and protect personal data in connection with the Service.

This Policy applies to all visitors, registered users and any other persons who interact with the Service in any capacity, including players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other locations across Pakistan and internationally.

By accessing or using the Service, you acknowledge that you have read, understood and agree to the collection and use of your personal data as described in this Policy. If you do not agree to this Policy, you must immediately discontinue use of the Service.

This Policy is incorporated by reference into the xxx777 Terms & Conditions. In the event of a conflict between this Policy and the Terms & Conditions regarding the handling of personal data, this Policy shall prevail.

In this Privacy Policy, the following terms carry the meanings set out below:

xxx777 collects personal data only to the extent necessary for the operation of the Service and compliance with applicable legal obligations. The categories of personal data we may collect include:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Residential address (including city and country — relevant for users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other locations)
• Username and encrypted password
• Contact telephone number
• Nationality and government-issued identification number (where required for KYC)

3.2 Financial & Transaction Data

• Payment method details (e.g., bank account identifiers, e-wallet references such as Easypaisa or JazzCash account identifiers, cryptocurrency wallet addresses)
• Deposit and withdrawal transaction records
• Account balance history
• Currency and PKR-denomination transaction records

Note: References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah and similar payment infrastructure names are made as familiar contextual references for Pakistani users. The collection of payment identifiers associated with these providers does not imply endorsement of gambling by these payment providers.

3.3 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., CNIC, passport, driving licence)
• Proof of address documents
• Source-of-funds documentation (where required by AML obligations)
• Facial verification data (where biometric KYC is implemented)

3.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system and browser information
• Session duration and activity logs
• Pages visited, features accessed and actions taken on the Platform
• Cookie identifiers and similar tracking technologies

3.5 Communications Data

• Customer support correspondence (email, live chat transcripts)
• Feedback and survey responses
• Dispute records

xxx777 collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support or respond to a survey, you directly provide personal data to us.
• Automated technical collection: When you browse the Platform, our servers automatically collect technical data including IP address, device identifiers, browser type and session activity data via cookies and server logs.
• Third-party verification providers: When you undergo KYC/AML verification, our appointed identity verification processors collect and process the verification data on our behalf under data processing agreements.
• Payment processors: When you transact on the Platform, our payment processing partners provide us with transaction references and status updates necessary for account management.
• Fraud prevention services: We may receive supplementary data from fraud detection services used to assess the risk profile of transactions and account activity.

xxx777 processes personal data only where a valid legal basis exists for doing so. The legal bases applicable to our processing activities include:

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

xxx777 uses personal data for the following defined purposes:

1. Account Management: Creating, maintaining, operating and securing your registered account on the Platform.
2. Transaction Processing: Processing deposits, withdrawals and bonus transactions in PKR and other supported currencies.
3. Identity & Age Verification: Verifying your identity and confirming you meet the minimum age requirement (18+ or the higher minimum required by the applicable jurisdiction).
4. AML/Fraud Prevention: Detecting, investigating and preventing money laundering, fraud, bonus abuse and other prohibited conduct on the Platform.
5. Customer Support: Responding to your enquiries, complaints and support requests, including via email and live chat.
6. Regulatory Compliance: Meeting applicable record-keeping, reporting and compliance obligations under the laws of the licensing jurisdiction.
7. Responsible Gambling: Monitoring account activity for indicators of problem gambling behaviour and implementing responsible gambling interventions, limits and self-exclusion measures.
8. Platform Security: Monitoring for suspicious activity, protecting the integrity of the Platform and investigating security incidents.
9. Service Improvement: Analysing usage patterns (on an anonymised or aggregated basis where possible) to improve the Platform's features, content and user experience.
10. Marketing Communications: Sending promotional communications to users who have opted in to receive them. You may opt out at any time.

xxx777 does not sell, rent or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and subject to appropriate safeguards:

• KYC/AML Verification Providers: Third-party identity verification and anti-money laundering screening services that process your identification documents and conduct sanctions, PEP (politically exposed persons) and adverse media checks on our behalf under data processing agreements.
• Payment Processors: Payment infrastructure providers that facilitate deposit and withdrawal transactions. These processors receive only the data necessary to execute and confirm transactions.
• Cloud & Infrastructure Providers: Hosting, storage and infrastructure service providers that process data on our behalf under contractual data processing agreements with appropriate security obligations.
• Fraud Detection Services: Third-party fraud risk assessment providers that analyse transactional and behavioural data for fraud indicators.
• Regulatory Authorities: Where required by applicable law, court order or regulatory mandate, xxx777 may disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: Legal counsel, accountants and auditors where access to personal data is necessary for the provision of professional advice, subject to professional confidentiality obligations.

xxx777 may transfer personal data to countries outside of the jurisdiction in which you are located, including to countries where the applicable data protection framework may differ from that of your home country. Such transfers may occur in connection with the engagement of cloud hosting providers, KYC processors or payment infrastructure providers that operate internationally.

Where personal data is transferred internationally, xxx777 implements appropriate safeguards to ensure that the transfer is subject to adequate data protection standards. These safeguards may include:

• Standard Contractual Clauses (SCCs) or equivalent contractual mechanisms approved by the applicable data protection authority.
• Transfer to jurisdictions that have been determined to provide an adequate level of data protection by the relevant regulatory authority.
• Application of binding corporate rules where applicable.

If you would like further information about the safeguards applicable to international data transfers involving your personal data, please contact us at the details provided in Section 16.

xxx777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and record-keeping obligations. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained for statistical or analytical purposes without limitation, as it can no longer identify any individual.

xxx777 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, disclosure or alteration. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) protocols, preventing interception in transit.
• Encrypted Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form on secured servers with access controls.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff who access personal data are subject to confidentiality obligations and receive data protection training.
• Two-Factor Authentication: Where available, account access is protected by optional two-factor authentication to prevent unauthorised login.
• Security Monitoring: The Platform is subject to ongoing security monitoring, vulnerability assessments and penetration testing to identify and remediate security risks.
• Incident Response: xxx777 maintains a data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, we will notify the relevant supervisory authority and affected users in accordance with applicable legal requirements.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by xxx777. To exercise any of these rights, please contact us using the details in Section 16.

xxx777 will respond to valid data subject requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, with notification to you of the extension and reasons.

xxx777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and understand how users interact with the Service. The following categories of cookies are used:

You may manage cookie preferences through your browser settings or via any cookie management tool provided on the Platform. Disabling certain categories of cookies may affect Platform functionality. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Service.

The xxx777 Service is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator/license jurisdiction. We do not knowingly collect, process or store personal data from persons under the age of 18.

If we become aware that personal data has been collected from a minor, we will immediately delete that data, close any associated account and take appropriate remedial action. Age verification is conducted as part of the KYC process for all registered accounts.

Parents and guardians who believe that a minor may have provided personal data to xxx777 are encouraged to contact us immediately at the details provided in Section 16 so that we can investigate and take appropriate action.

The xxx777 Platform may contain references to third-party services, payment providers and external platforms. This Privacy Policy applies solely to the xxx777 Platform and does not govern the privacy practices of any third party.

References to payment infrastructure names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual references for Pakistani users. If you choose to use these payment services, their own privacy policies and terms apply to any personal data you provide directly to them. xxx777 is not responsible for the privacy practices of these third-party services.

We encourage users to review the privacy policies of any third-party services they interact with in connection with their use of the xxx777 platform.

xxx777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements or our data processing practices. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use or share your personal data — we will endeavour to notify registered users by email or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Service following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must discontinue use of the Service and may request account closure.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data by xxx777, please contact our Data Protection team using the details below:

Our support email is provided as plain text only and is not a clickable link. To contact us, copy the address manually: [email protected]