xd777 Privacy Policy

1 Introduction

xd777 ("xd777", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who register for, access, or use the xd777 online casino and sports betting Platform at xd777.org ("the Platform"). This Privacy Policy ("Policy") explains in detail how xd777 collects, processes, stores, shares, and safeguards your personal information in connection with your use of the Platform.

This Policy applies to all xd777 users, including registered account holders and visitors who access the Platform without registering. It should be read in conjunction with xd777's Terms & Conditions, which governs the contractual relationship between you and xd777.

By creating an xd777 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how xd777 handles your personal data as described here, you must cease using the Platform immediately.

2 Data Controller

For the purposes of applicable data protection law, xd777's operating entity is the data controller responsible for the personal data of Platform users. As data controller, xd777 determines the purposes and means by which personal data is processed.

If you have questions about how xd777 processes your personal data, or wish to exercise any data rights described in this Policy, please contact xd777 using the details provided in Section 13 of this document.

3 Personal Data We Collect

xd777 collects personal data in the following categories when you use the Platform:

xd777 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where identity documentation provided during KYC incidentally contains such data, in which case it is used solely for verification purposes and not for any other processing activity.

4 How xd777 Uses Your Personal Data

xd777 uses the personal data collected from you for the following purposes:

• Account Registration and Management: To create, verify, and maintain your xd777 account, including identity verification at registration and ongoing KYC compliance checks.
• Service Delivery: To provide access to the xd777 Platform, including casino games, live dealer tables, sports betting markets, the cashier, and all associated features.
• Transaction Processing: To process PKR deposits via JazzCash, Easypaisa, and bank transfer, and to process withdrawal requests back to your verified payment method.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, money laundering, bonus abuse, and other prohibited conduct as defined in the xd777 Terms & Conditions.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) laws, counter-terrorism financing regulations, age verification obligations, and any other legal requirements applicable to xd777's operations.
• Responsible Gaming: To monitor gambling behaviour and apply responsible gaming tools (including deposit limits, session restrictions, and self-exclusion) where required for player welfare or by regulatory obligation.
• Customer Support: To respond to your enquiries, complaints, and support requests efficiently and in English.
• Marketing Communications: To send you promotional emails, bonus notifications, and match-day offers where you have given consent to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving xd777's products, features, and user experience for Pakistani players.

5 Legal Basis for Processing

xd777 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases xd777 relies upon are:

• Contract Performance: Processing necessary to fulfil xd777's contractual obligations to you under the xd777 Terms & Conditions — including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML/KYC regulatory requirements, age verification, and law enforcement obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and internal analytics — where xd777's legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Cookies & Tracking Technologies

xd777 uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform for the following purposes:

• Strictly Necessary Cookies: Essential for the Platform to function, including maintaining your xd777 login session, remembering your account preferences, and ensuring Platform security. These cannot be disabled without affecting core functionality.
• Analytics Cookies: Used to understand how visitors interact with the xd777 Platform — which pages are visited most, where players navigate after login, and how games perform on different device types. Data is aggregated and anonymised.
• Functionality Cookies: Remember your language and display preferences on the xd777 Platform to provide a personalised experience without requiring you to reconfigure settings on each visit.
• Marketing Cookies: Used only where you have given consent to receive relevant promotional communications from xd777. These track whether you have previously interacted with xd777 promotional content.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may impair your ability to use some xd777 Platform features correctly.

7 Third-Party Data Sharing

xd777 does not sell, rent, or trade your personal data to any third party for commercial purposes. xd777 may share your personal data with third parties only in the following limited circumstances:

• Payment Processors: xd777 shares necessary financial data with JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners solely to process your transactions. These providers are bound by their own privacy policies and applicable financial regulations.
• Game Providers: xd777 shares session identifiers (not personal identity data) with certified game providers such as Pragmatic Play, Evolution, Microgaming, and NetEnt to enable game functionality, RNG verification, and RTP audit processes.
• Identity Verification Services: During KYC, xd777 may share identity documents with authorised third-party verification providers solely for the purpose of confirming your identity and age.
• Legal and Regulatory Authorities: xd777 will disclose personal data to government authorities, law enforcement agencies, or regulators where required by applicable law, court order, or regulatory obligation — without prior notice to you where legally required.
• Fraud Prevention Agencies: xd777 may share data with industry fraud prevention databases to detect and prevent money laundering, bonus abuse, and other prohibited conduct affecting the xd777 Platform.

All third parties with whom xd777 shares personal data are contractually required to maintain appropriate data security standards and to process your data only for the specific purposes described above.

8 Data Retention

xd777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any case for the minimum period required by applicable law. General retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active xd777 account, plus a minimum of five (5) years following account closure to comply with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with applicable financial record-keeping obligations.
• Support Communications: Retained for three (3) years from the date of the communication, unless a longer period is required for an ongoing dispute or investigation.
• Technical and Session Data: Retained for up to twelve (12) months from collection for security and platform analytics purposes.
• Marketing Consent Records: Retained for the period of your active consent, plus three (3) years thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, xd777 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

9 Security Measures

xd777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the xd777 Platform is encrypted using 256-bit SSL/TLS. This includes login credentials, payment details, and all personal data submitted through the Platform.
• AES-256 Encryption at Rest: Personal data stored in xd777's databases is encrypted using AES-256 encryption. Password data is processed using one-way cryptographic hashing — xd777 staff cannot access your password in plain text.
• Access Controls: Access to personal data is restricted to xd777 employees and authorised contractors who require access in the course of their legitimate job functions. All access is logged and periodically audited.
• Fraud Detection Systems: xd777 operates multi-layer automated fraud detection across all account activity, login events, and financial transactions to identify and respond to potential security incidents.
• Breach Response Procedures: xd777 maintains documented data breach response procedures. In the event of a personal data breach that poses a risk to your rights, xd777 will notify affected users as required by applicable law.

While xd777 takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your xd777 login credentials and for notifying xd777 promptly if you suspect any unauthorised access to your account.

10 Your Data Rights

Subject to applicable data protection law and the specific circumstances of your request, you have the following rights in relation to your personal data held by xd777:

• Right of Access: You may request a copy of the personal data xd777 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held on your xd777 account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data — subject to xd777's legal retention obligations (particularly AML record-keeping requirements, which may prevent full erasure for the applicable statutory period).
• Right to Restrict Processing: You may request that xd777 temporarily restrict the processing of your personal data while a rectification or objection request is being reviewed.
• Right to Object: You may object to the processing of your personal data where xd777 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where xd777 processes your data on the basis of consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of the above rights, please contact xd777 support using the email address registered on your account. xd777 will respond to all valid data rights requests within 30 days of receipt.

11 Children's Privacy

The xd777 Platform is strictly intended for adults aged 18 years and above. xd777 does not knowingly collect or process personal data from individuals under the age of 18. If xd777 becomes aware that personal data has been collected from a minor, the relevant account will be immediately closed, the data deleted, and any deposits returned through the original payment method after identity verification.

If you are a parent or guardian and believe that a minor has registered on the xd777 Platform, please contact xd777 support immediately using the contact details in Section 13. xd777 takes underage access seriously and will act promptly on all such reports.

12 Changes to This Privacy Policy

xd777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

Material changes to this Policy will be communicated to registered xd777 account holders via email (to the address registered on the account) and/or by a prominent notice on the Platform. Continued use of the xd777 Platform following notification of a Policy update constitutes your acceptance of the revised terms.

xd777 encourages you to review this Privacy Policy periodically to remain informed about how your personal data is being handled.

13 Contact xd777 About Privacy

For all privacy-related enquiries, data rights requests, or concerns about how xd777 processes your personal data, please contact xd777 as follows:

• Email: [email protected] — please include "Privacy Request" in the subject line and your registered xd777 account email in the message body.
• Live Chat: Available 24/7 through the xd777 Platform after login — select "Account & Privacy" from the support menu.
• Response Time: xd777 aims to acknowledge all privacy-related requests within 3 business days and to respond in full within 30 days.

xd777 is committed to handling all data enquiries professionally, confidentially, and in accordance with applicable data protection law. If you are not satisfied with xd777's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.