xc777 Privacy Policy

Welcome to the xc777 Privacy Policy. xc777 ("we", "our", "us") operates the online gaming and sports betting platform at xc777.bet. We are committed to protecting the personal information of every player who registers, deposits, plays, or simply browses our platform. This Privacy Policy applies to all users of xc777.bet, including registered account holders and unregistered visitors.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming policy, all of which govern your relationship with xc777. By continuing to use xc777.bet, you acknowledge that you have read and understood this Privacy Policy in its entirety.

For the purposes of this Privacy Policy, "personal data" means any information that identifies you or could reasonably be used to identify you — including your name, email address, phone number, payment details, device identifiers, and gameplay activity. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

xc777 collects personal data in several categories depending on how you interact with our platform. The table below outlines the categories of data we collect and specific examples within each category:

xc777 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information. If you voluntarily share such information with our support team in the context of a responsible gaming inquiry, it will be handled with the highest degree of confidentiality and used solely to provide appropriate support.

xc777 collects your personal data through the following channels:

• Direct interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our live chat or email support, or submit any form on xc777.bet, you directly provide us with personal data.
• Automated technologies: As you navigate xc777.bet, we automatically collect technical and usage data through server logs, session cookies, and analytics tools. This data is collected passively and does not require any action on your part.
• Payment processors: When you deposit or withdraw via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, our payment processing partners may share transaction confirmation data with xc777 to reconcile your account balance.
• Game providers: Our third-party Game Providers (such as live casino and slot studios) may share session and outcome data with xc777 to ensure accurate crediting of winnings and to support any dispute resolution process.
• Fraud and compliance screening: xc777 may use third-party identity verification and anti-fraud services to cross-reference data you provide during KYC. These services operate under strict data processing agreements with xc777.

xc777 processes your personal data only for specific, legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which xc777 uses your personal data are:

• Account management: To create, verify, maintain, and secure your xc777 account, including processing login requests and managing account settings.
• Transaction processing: To process deposits and withdrawals accurately, reconcile balances, and maintain complete transaction records across all supported PKR payment channels.
• Identity verification (KYC): To verify your identity and age (21+ requirement) in accordance with our anti-money-laundering obligations and to comply with applicable international gaming regulations.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat or email at [email protected].
• Platform personalisation: To tailor your xc777 experience — for example, displaying cricket and PSL betting markets prominently for Pakistani players, or recommending game categories based on your play history.
• Bonus and promotion management: To track bonus eligibility, monitor wagering requirements, and prevent bonus abuse that would be unfair to honest players.
• Responsible gaming: To apply deposit limits, loss limits, cooling-off periods, and self-exclusion instructions that you have activated, and to monitor play patterns that may indicate problem gambling behaviour.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, money laundering, and any other prohibited conduct defined in our Terms & Conditions.
• Legal compliance: To fulfil xc777's obligations under applicable gaming regulations, financial crime legislation, and any lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and reliability of xc777.bet for all Pakistani players.

xc777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your identity data, contact data, financial data, and transaction data is necessary to perform the contract between you and xc777 — i.e., to operate your account and process your bets and transactions.
• Legal obligation: KYC verification, anti-money-laundering screening, and retention of transaction records are required by applicable international gaming and financial regulations. xc777 cannot waive these obligations.
• Legitimate interests: Fraud prevention, platform security, abuse detection, and anonymised analytics are carried out on the basis of xc777's legitimate interests in operating a secure, fair, and sustainable gaming platform. These interests have been assessed as not overriding the rights and interests of individual players.
• Consent: Where xc777 sends you optional promotional communications (such as bonus alerts or new game notifications), we rely on your freely given consent. You may withdraw this consent at any time by contacting our support team.

xc777 does not sell or rent your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processors receive the minimum financial data necessary to execute your deposit or withdrawal. Each processor is bound by their own privacy and security standards.
• Game providers: Third-party game studios receive your Player ID and session data to deliver game content and report outcomes. They do not receive your financial details or government-issued identity documents.
• Identity verification services: Our KYC and fraud-screening partners receive the identity documents you submit during verification. These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than verification.
• Regulatory and law enforcement authorities: xc777 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required by law, court order, or where xc777 has a good-faith belief that disclosure is necessary to protect the safety or rights of xc777, its players, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of xc777's assets, your personal data may be transferred to the acquiring entity. We will notify affected players before any such transfer and ensure the acquiring entity honours commitments made in this Privacy Policy.

All third-party service providers engaged by xc777 are subject to contractual obligations requiring them to process personal data only on xc777's documented instructions, to maintain appropriate technical and organisational security measures, and to promptly notify xc777 of any personal data breach.

xc777.bet uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. A cookie is a small text file stored on your device by your browser. xc777 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for xc777.bet to function. They include your session authentication token (so you remain logged in during your visit), CSRF protection tokens, and currency/language preference flags. These cookies cannot be disabled without impairing basic platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate xc777.bet — which pages are visited most, how long sessions last, and where players encounter errors. This data helps xc777 improve the platform. No personally identifiable information is transmitted via these cookies.
• Functional cookies: These cookies remember your preferences — such as your preferred game category, display settings, or responsible gaming limit configurations — so you do not need to re-enter them each time you visit.
• Security cookies: These cookies support xc777's fraud detection and account security systems by flagging unusual session behaviour, such as logins from new devices or atypical geographic locations.

xc777 does not use third-party advertising or targeting cookies. You will not be tracked across other websites for advertising purposes as a result of visiting xc777.bet. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from logging into your xc777 account.

xc777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of your last transaction or account closure, whichever is later. This period is required by international anti-money-laundering standards applicable to online gaming operators.
• KYC documentation: Retained for a minimum of 5 years from the completion of the verification process or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication, to support future dispute resolution and quality assurance.
• Responsible gaming records: Self-exclusion, deposit limit, and cooling-off records are retained for the duration of the restriction plus 5 years, to prevent circumvention through re-registration.
• Technical and usage data: Server logs and anonymised analytics data are retained for 12 months on a rolling basis, after which they are deleted or fully anonymised.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent, to demonstrate compliance with consent requirements.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods. Where deletion is not immediately practicable (for example, data held in backup archives), xc777 will ensure the data is isolated and protected from active processing until it can be deleted.

xc777 respects your rights over your own personal data. Regardless of your location in Pakistan — whether in Karachi, Lahore, Islamabad, or Faisalabad — you are entitled to exercise the following rights with respect to the personal data xc777 holds about you:

• Right of access: You may request a copy of all personal data xc777 holds about you. We will respond within 30 days of receiving a verified request.
• Right to rectification: If any personal data xc777 holds about you is inaccurate or incomplete, you may request that we correct or complete it. Account profile details can be updated directly through your account settings; for KYC data, please contact support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that we may be required to retain certain data for the retention periods described in Section 08 above notwithstanding an erasure request.
• Right to restriction of processing: You may request that xc777 restrict processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is pending.
• Right to data portability: You may request that xc777 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. We will honour direct marketing objections immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We may ask you to verify your identity before processing your request. We will respond to all valid requests within 30 days and will not charge a fee for reasonable requests.

xc777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• Encryption in transit: All data transmitted between your device and xc777.bet is encrypted using TLS 1.2 or higher. You can verify this by checking for the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive personal data — including identity documents, financial account numbers, and KYC records — is encrypted at rest using AES-256 encryption in our secure database infrastructure.
• Access controls: Access to personal data within xc777's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-factor authentication: xc777 supports and recommends 2FA for all player accounts. Internal xc777 systems require 2FA for all staff with access to personal data.
• Penetration testing and vulnerability management: xc777 conducts regular security assessments and acts promptly to remediate identified vulnerabilities.
• Incident response: xc777 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, xc777 will notify affected players without undue delay and will report to relevant regulatory authorities as required by applicable law.

While xc777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your xc777 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

If xc777 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and cancel any financial transactions associated with that account in accordance with our underage gambling policy and applicable regulations.

If you are a parent or guardian and believe your child has created an xc777 account or provided personal data to xc777, please contact our support team immediately at [email protected]. We treat reports of underage access with the utmost urgency and will act within 24 hours of receiving a verified report.

xc777.bet may contain links to game provider interfaces and payment processor pages that are operated by third parties. Once you navigate away from xc777.bet to a third-party website or service, this Privacy Policy no longer applies. xc777 has no control over and accepts no responsibility for the privacy practices of any third-party website.

We recommend that you read the privacy policy of any third-party service you access in connection with your xc777 account — including your JazzCash, EasyPaisa, or banking app — to understand how they process your personal data independently of xc777.

xc777 operates under an international gaming framework, and some of our third-party service providers — including game studios, identity verification services, and cloud infrastructure providers — may be located outside Pakistan. Where personal data is transferred internationally, xc777 ensures that appropriate safeguards are in place to protect your data to the standard described in this Privacy Policy.

These safeguards include contractual clauses in our data processing agreements with third parties that impose equivalent data protection obligations, and our preference for service providers with established security certifications. xc777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the safeguards described above.

xc777 reserves the right to update or amend this Privacy Policy at any time. We will post the revised Privacy Policy on this page with an updated "Last Reviewed" date. Where changes are material — for example, where we introduce a new category of data processing or a new type of data sharing — we will also notify registered players via the email address associated with their xc777 account prior to the changes taking effect.

Your continued use of xc777.bet following the effective date of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the updated policy. If you do not agree to any updated Privacy Policy, you should cease using xc777.bet and contact our support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or xc777's handling of your personal data, please contact our dedicated privacy support team through any of the following channels:

• Live Chat: Available 24/7 directly within xc777.bet. Average response time under 2 minutes — the fastest way to reach us from anywhere in Pakistan.
• Email: [email protected] — we aim to respond to all privacy-related emails within 4 business hours.

When submitting a data rights request, please include your registered xc777 username and a brief description of your request so we can process it efficiently. We may ask for identity verification before acting on sensitive requests such as data access or erasure.