xs777 Privacy Policy

1. Introduction

xs777 operates Pakistan's trusted online casino and sports betting platform at xs777.ws. As part of delivering a secure, fair, and regulated gaming experience to players across Karachi, Lahore, Islamabad, Faisalabad, and beyond, xs777 necessarily collects and processes certain personal data about its registered members.

This Privacy Policy sets out, in clear and transparent terms, exactly what personal data xs777 collects, the purposes for which it is processed, the lawful basis on which that processing rests, the parties with whom data may be shared, how long data is kept, and the rights available to you as a data subject. xs777 takes its data protection obligations seriously and has implemented technical and organisational measures appropriate to the sensitivity of the data it holds.

If you have any questions about how xs777 handles your personal data, you may contact the xs777 support team at any time via 24/7 live chat or by email at [email protected].

2. Data Controller

For the purposes of applicable data protection law, xs777 is the data controller in respect of all personal data collected through the xs777 platform. xs777 determines the purposes and means of processing player personal data and is responsible for ensuring that such processing complies with the data protection obligations imposed by xs777's international gaming licence and applicable privacy legislation.

Where xs777 engages third-party service providers to process personal data on its behalf — such as KYC verification agencies or payment processors — those parties act as data processors under written agreements that impose data security and processing restrictions consistent with this Privacy Policy.

3. Data We Collect

3.1 Registration Data

When you create an xs777 account, we collect: your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and administer your account and to comply with xs777's age verification and KYC obligations.

3.2 Identity Verification (KYC) Data

Before processing withdrawals, xs777 is required under its international gaming licence to verify your identity. KYC data collected may include: a copy of your CNIC (Computerised National Identity Card) or passport, a proof of address document (such as a utility bill or bank statement), and proof of ownership of your payment method (such as a screenshot of your JazzCash or EasyPaisa wallet).

3.3 Financial Data

xs777 collects records of all deposits and withdrawals processed through your account, including payment method details (e.g., JazzCash account number, EasyPaisa number, HBL or UBL account reference), transaction amounts in PKR, and transaction timestamps. xs777 does not store full card numbers or banking credentials — payment processing is handled by PCI-DSS compliant payment partners.

3.4 Gaming Activity Data

xs777 maintains complete records of all wagering activity on your account, including game sessions, bet amounts, game outcomes, bonus usage, and responsible gaming limit configurations. This data is used for account administration, dispute resolution, regulatory reporting, and responsible gaming monitoring.

3.5 Technical & Device Data

When you access xs777, our systems automatically collect certain technical data, including: your IP address, device type and operating system, browser type and version, session timestamps, and pages or features accessed. This data is used for security monitoring, fraud prevention, and platform performance analysis.

3.6 Communications Data

If you contact xs777 via live chat, email, or any other support channel, we retain a record of that correspondence, including the content of messages and any attachments you provide. This data is used to manage your support request and to maintain a history of your interactions with xs777.

4. How We Use Your Data

xs777 uses the personal data it collects for the following purposes:

• Account Administration: To create, maintain, and manage your xs777 player account, including processing PKR deposits and withdrawals, adjusting account settings, and responding to account queries.
• Identity & Age Verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 21 years, in compliance with xs777's international gaming licence.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods, and to maintain accurate financial records.
• Regulatory & Legal Compliance: To fulfil xs777's obligations under its international gaming licence, including anti-money laundering (AML) reporting, responsible gaming monitoring, and responses to lawful requests from regulatory or law enforcement authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other conduct that breaches xs777's Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns and identify signs of problem gambling, to enforce player-configured deposit and loss limits, and to process self-exclusion requests.
• Platform Improvement: To analyse aggregate usage data and improve the xs777 platform's performance, game offering, and user experience for Pakistani players.
• Customer Support: To manage your support requests and maintain a record of communications for quality assurance purposes.
• Marketing Communications: Where you have opted in, to send you relevant promotional offers, bonus notifications, and platform updates. You may opt out at any time as described in Section 13.

5. Legal Basis for Processing

xs777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and xs777 — including account registration, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable law and regulatory requirements, including KYC verification, AML record-keeping, and responsible gaming obligations under xs777's international gaming licence.
• Legitimate Interests: Processing necessary for xs777's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight, provided those interests are not overridden by your data protection rights.
• Consent: Where xs777 relies on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Third-Party Data Sharing

xs777 does not sell your personal data. xs777 may share your data with the following categories of third party, strictly as necessary to operate the platform and fulfil its legal obligations:

• KYC / Identity Verification Providers: Third-party agencies engaged to verify the identity, age, and document authenticity of xs777 players as required by the platform's international gaming licence.
• Payment Processors: Licensed payment service providers facilitating PKR deposits and withdrawals, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Each provider is bound by their own data protection obligations and applicable financial regulation.
• Game Content Providers: International gaming software suppliers whose games are available on xs777. These providers may receive limited technical data (such as session tokens) required to deliver game content; they do not receive personally identifiable player data beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: xs777 will disclose player data to competent regulatory or law enforcement authorities where required to do so by applicable law, court order, or xs777's international gaming licence obligations.
• Fraud Prevention Services: Third-party services used to detect and prevent fraud, multi-accounting, and money laundering on the xs777 platform.
• IT Infrastructure & Cloud Providers: Trusted technology providers who host xs777's platform infrastructure. All such providers are contractually required to maintain data security standards consistent with this Privacy Policy.

All third parties receiving xs777 player data are required to process that data only for the specific purposes for which it was shared, and to maintain appropriate technical and organisational security measures.

7. International Data Transfers

xs777 is operated under an international gaming licence, and some of the third-party service providers with whom xs777 shares data may be located outside Pakistan. Where personal data is transferred internationally, xs777 takes appropriate steps to ensure that such transfers are subject to adequate safeguards, including contractual data protection clauses and — where applicable — transfers to jurisdictions recognised as providing an adequate level of data protection.

If you have questions about the specific safeguards in place for a particular international data transfer, please contact xs777 support via live chat or at [email protected].

8. Data Retention

xs777 retains personal data for no longer than is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods imposed by xs777's regulatory and legal obligations:

• Account & Registration Data: Retained for the lifetime of your xs777 account plus a minimum of five (5) years following account closure, in accordance with xs777's AML record-keeping obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of verification, as required under xs777's international gaming licence.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable AML and financial record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Communications Data: Support correspondence is retained for a minimum of two (2) years for quality assurance and compliance purposes.
• Technical / Device Data: System logs are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit xs777. They enable the platform to recognise your device across page visits, maintain your login session, and store your preferences. xs777 also uses similar technologies including local storage and session storage where appropriate.

9.2 Cookies Used by xs777

• Essential Cookies: Required for the xs777 platform to function. These include session management cookies that keep you logged in during your gaming session. These cookies cannot be disabled without impairing platform functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, including CSRF protection tokens and device fingerprinting data used to identify suspicious login attempts.
• Performance & Analytics Cookies: Used to collect aggregate, anonymised data about how players use xs777 — such as which games are most visited and how navigation flows are used — to inform platform improvements. No personally identifiable information is collected through these cookies.
• Preference Cookies: Store your platform preferences such as language settings, display options, and responsible gaming limit configurations.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in to your xs777 account. xs777 does not use third-party advertising or behavioural tracking cookies.

10. Your Data Rights

As an xs777 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact xs777 via live chat or at [email protected]. xs777 will respond to all data subject requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data xs777 holds about you, together with information about how it is processed.
• Right to Rectification: If any personal data xs777 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to xs777's legal and regulatory retention obligations — data that must be retained for AML or licensing compliance purposes cannot be deleted on request.
• Right to Restrict Processing: In certain circumstances, you have the right to request that xs777 restrict the processing of your personal data while a dispute or rectification request is pending.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of xs777's legitimate interests, including profiling for responsible gaming purposes. xs777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where xs777 processes your data on the basis of your consent (e.g., for marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11. Security Measures

xs777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and xs777 servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the xs777 platform.
• Multi-factor authentication requirements for administrative access to xs777 systems.
• Automated anomaly detection systems monitoring for unusual account activity and potential data breaches.
• Incident response procedures ensuring that any data breach is contained, assessed, and — where required by applicable law — reported to the relevant authority within the required timeframe.

While xs777 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own xs777 login credentials. If you believe your account has been compromised, please contact xs777 support immediately via 24/7 live chat.

12. Children & Minors

xs777 is strictly for adults aged 21 years and over. xs777 does not knowingly collect personal data from individuals under the age of 21. If xs777 becomes aware that it has collected personal data from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor under your care has registered an account on xs777, please contact xs777 immediately via live chat or at [email protected]. xs777 takes underage access extremely seriously and will act promptly on all such reports.

13. Marketing Communications

xs777 may send you promotional communications — including bonus offers, game launch announcements, PSL season promotions, and platform updates — where you have consented to receive such communications at the time of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your xs777 account dashboard.
• Clicking the "Unsubscribe" link in any xs777 marketing email.
• Contacting xs777 support via live chat and requesting removal from marketing lists.

Opting out of marketing communications will not affect the delivery of transactional messages — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent as a necessary part of your xs777 account service.

14. Changes to This Policy

xs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or xs777's data processing practices. Material changes will be communicated to registered players via email or in-platform notification prior to the effective date of the change.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. xs777 encourages players to review this Privacy Policy periodically to stay informed about how their personal data is protected. Continued use of the xs777 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or xs777's handling of your personal data, please contact the xs777 team through the following channels:

xs777 is committed to addressing all privacy-related enquiries promptly and transparently. Response times via live chat are typically under 5 minutes; email responses are provided within 24 business hours. Data subject requests are acknowledged within 48 hours and substantively responded to within 30 days.