This Privacy Policy describes how xp777 (referred to as "we", "us", "our", or "the Platform") collects, uses, stores, and protects personal data belonging to registered users ("you", "the Player") of the xp777 platform at https://xp777.im. It applies to all services offered through the platform including casino games, sports betting, esports betting, and related account management features.
xp777 is primarily designed for Pakistani players. We understand that trust is everything when it comes to your personal information. We have written this policy to be clear and direct — not to bury important details in paragraphs of legal language. If after reading this you have questions, our support team is available 24/7.
xp777 – privacy-first platform for Pakistani players
1. Overview
xp777 operates as an online betting and casino platform. To provide services safely and reliably, we need to collect certain personal information from our users. This includes the information you give us when registering, the data generated by your activity on the platform, and technical information from your device and browser.
We process this data for specific, defined purposes — running your account, processing your payments, keeping the platform secure, complying with anti-fraud and anti-money-laundering obligations, and improving the xp777 experience for Pakistani players. We do not use your data for any purpose you have not been informed about in this policy.
This policy should be read alongside the xp777 Terms and Conditions, which govern the overall relationship between you and the platform. By registering on xp777, you confirm that you have read and understood both documents.
2. Data We Collect
xp777 collects the following categories of personal data from players:
2.1 Registration Data
- Full name as per your CNIC or passport
- Mobile phone number (used as primary account identifier)
- Email address (optional but recommended for account recovery)
- Date of birth (to verify the 18+ age requirement)
- City and province of residence
2.2 Identity Verification Data
- CNIC number or passport number
- Scanned or photographed copy of identity document (requested when verification is required)
- Proof of address documentation where applicable
- Selfie or facial image for identity confirmation in certain circumstances
2.3 Payment & Financial Data
- Mobile wallet identifiers (Easypaisa account number, JazzCash number, NayaPay ID, SadaPay ID)
- Bank account details used for IBFT transfers
- Partial payment card details (last four digits and card type — full card numbers are never stored by xp777)
- Deposit and withdrawal transaction history
- Account balance history
2.4 Activity & Gaming Data
- Betting history including games played, stakes placed, and outcomes
- Casino session data including session duration and game selections
- Bonus claims, wagering progress, and promotion participation
- Customer support interactions including chat transcripts and emails
2.5 Technical & Device Data
- IP address and approximate geographic location derived from it
- Device type, operating system version, and browser type
- Cookie identifiers and session tokens
- Platform access logs including login timestamps and failed login attempts
| Data Category | Examples | Required? |
|---|---|---|
| Registration | Name, mobile number, date of birth | Yes – to create account |
| Verification | CNIC, identity document image | On request / before high-value withdrawal |
| Payment | Easypaisa number, IBFT account | Yes – to process PKR transactions |
| Gaming Activity | Bet history, session data | Automatically generated |
| Technical | IP address, device type, cookies | Automatically collected |
Encrypted Storage
All personal data stored by xp777 is encrypted at rest using AES-256 standard. Payment data is handled by certified processors — full card details are never stored on xp777 servers.
No Data Selling
xp777 does not sell, rent, or trade your personal data to advertisers or third-party data brokers. Your information is used solely to operate and improve the platform.
Your Account, Your Control
You can request access to, correction of, or deletion of your personal data at any time by contacting xp777 support. We process all such requests within a reasonable timeframe.
3. How We Collect Your Data
xp777 collects data through three primary channels:
3.1 Directly From You
When you register on xp777, fill in your account profile, submit a verification document, make a deposit, contact our support team, or participate in a promotion, you are providing data directly to us. This is the most significant source of personal information we hold.
3.2 Automatically Through Platform Use
When you use xp777 — whether browsing games, placing bets, logging in from a new device, or navigating between sections of the platform — we automatically collect technical data about that activity. This includes your IP address, the device you're using, session identifiers, and interaction logs. This data is necessary for security monitoring, fraud prevention, and platform performance optimisation.
3.3 From Third-Party Payment Processors
When you complete a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or IBFT, the relevant payment provider confirms the transaction to xp777. The confirmation includes the transaction reference, amount, and your account identifier with that provider. xp777 does not receive your full payment credentials — only what is necessary to confirm and reconcile the transaction.
xp777 – clear data practices, trusted by Pakistani players nationwide
4. Why We Use Your Data
xp777 uses your personal data for the following specific purposes. We do not use your data for anything not listed here without first updating this policy and notifying you.
- Account management: Creating and maintaining your xp777 account, enabling login, and managing your profile and preferences.
- Payment processing: Processing deposits and withdrawals in PKR via your chosen payment method and maintaining accurate transaction records.
- Identity verification: Confirming that you meet the 18+ age requirement and verifying your identity as required by anti-money-laundering obligations before processing significant withdrawals.
- Security and fraud prevention: Monitoring account activity for unusual patterns that may indicate fraud, multi-accounting, or system abuse; protecting the platform and other players from harm.
- Responsible gaming: Tracking gaming behaviour to identify patterns that may indicate problem gambling and enabling the responsible gaming tools available to all xp777 players.
- Customer support: Providing assistance when you contact our support team, maintaining records of support interactions to resolve disputes and improve service quality.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how the xp777 platform is used and where it can be improved for Pakistani players.
- Communications: Sending transactional messages such as deposit confirmations, withdrawal notifications, and important account alerts. Marketing communications are only sent with your consent and can be opted out of at any time.
- Legal compliance: Fulfilling obligations under applicable laws including anti-money laundering requirements, responding to lawful requests from regulatory or law enforcement authorities.
5. Legal Basis for Processing
xp777 processes your personal data under the following legal grounds:
- Contract performance: Most processing is necessary to provide the services you signed up for — running your account, processing payments, and settling bets.
- Legal obligation: Identity verification and transaction monitoring are required by anti-money-laundering and counter-terrorism-financing rules applicable to online gaming platforms.
- Legitimate interests: Security monitoring, fraud detection, and platform improvement are carried out in the legitimate interests of xp777 and its users, provided those interests do not override your rights.
- Consent: Where processing is based on consent — for example, receiving marketing emails — you have the right to withdraw that consent at any time without affecting any other processing.
6. Data Sharing
xp777 does not sell your data. We share it only with the specific categories of third party listed below, and only to the extent necessary for the stated purpose:
6.1 Payment Processors
Easypaisa, JazzCash, NayaPay, SadaPay, and our bank transfer and card processing partners receive only the minimum information necessary to process your transaction — typically your account identifier and the transaction amount in PKR.
6.2 Identity Verification Services
Where automated identity verification is used, your identity document data may be processed by a third-party verification service operating under a data processing agreement with xp777. This data is not retained by the verification provider beyond the period needed to complete verification.
6.3 Technology Infrastructure Providers
xp777 uses cloud infrastructure and technology services to host the platform. Providers hosting data on our behalf operate under data processing agreements requiring them to process your data only on our instructions and to maintain appropriate security standards.
6.4 Game Providers
Third-party casino game providers whose games appear on xp777 may receive a session token and stake/outcome data for game integrity and auditing purposes. They do not receive your personal identifiers such as name, mobile number, or payment details.
6.5 Law Enforcement & Regulatory Bodies
xp777 will disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities when required to do so by law or by a lawful request. We will notify you of any such disclosure where we are legally permitted to do so.
7. Data Retention
xp777 retains your personal data for as long as your account is active and for a period following account closure as required by our legal and regulatory obligations. Specific retention periods are as follows:
- Account and identity data: Retained for the duration of your xp777 account plus five years following closure, to comply with anti-money laundering record-keeping requirements.
- Transaction records: Retained for seven years from the date of the transaction in line with standard financial record-keeping obligations.
- Betting and gaming activity: Retained for five years to support dispute resolution and responsible gaming obligations.
- Support communications: Retained for three years to allow reference in ongoing or future disputes.
- Technical and security logs: Retained for twelve months, after which they are anonymised or deleted.
- Verification documents: Deleted within thirty days of account closure unless a legal hold applies.
When data reaches the end of its retention period, xp777 deletes or anonymises it securely. If you request deletion of your data before the retention period ends, we will delete or anonymise all data that is not subject to a legal retention obligation.
xp777 – secure, transparent, and trusted across Pakistan
8. How We Keep Your Data Safe
xp777 takes data security seriously and has implemented layered technical and organisational safeguards to protect your personal information:
TLS Encryption in Transit
All data transmitted between your device and xp777 servers is encrypted using TLS 1.2 or higher. Any attempt to intercept this traffic produces unreadable data.
AES-256 at Rest
Stored personal data and financial records on xp777 servers are encrypted using AES-256, the same standard used by financial institutions globally.
Staff Access Controls
Access to personal data within xp777 is restricted to staff with a direct operational need. All access is logged and reviewed regularly. Support agents see only what is necessary to help you.
Ongoing Security Testing
The xp777 platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited. Security updates are applied promptly.
Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any suspicious activity on your xp777 account — unexpected logins, unfamiliar transactions, or any other concern — contact our support team immediately so we can act quickly to protect your account.
9. Cookies & Similar Technologies
xp777 uses cookies and similar browser storage technologies to provide essential platform functionality, maintain your login session, remember your preferences, and gather anonymised analytics about how the platform is used.
9.1 Types of Cookies Used
| Cookie Type | Purpose | Retention | Removable? |
|---|---|---|---|
| Maintain your logged-in session, prevent CSRF attacks, enable secure payment flows | Session / up to 30 days | No – required for platform to function | |
| Remember your language, display preferences, last-visited game categories | Up to 90 days | Yes – via browser settings | |
| Anonymised data about platform usage to improve the xp777 experience | Up to 12 months | Yes – via browser settings |
9.2 Managing Cookies
You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking essential cookies will prevent xp777 from functioning correctly — you will not be able to stay logged in or complete transactions without them. Blocking analytics or functional cookies has no effect on core platform features.
10. Your Data Rights
As a player on xp777 you have the following rights regarding your personal data. You can exercise any of these rights at any time by contacting our support team:
Right of Access
You can request a copy of all personal data xp777 holds about you. We will provide this in a structured format within 30 days of your request.
Right of Correction
If any personal data held by xp777 is inaccurate or incomplete, you can request correction. Changes to core identity data may require supporting documentation.
Right to Erasure
You can request deletion of your personal data. Requests will be fulfilled for all data not subject to a legal retention requirement. Some financial and identity records must be kept by law.
Right to Restrict Processing
You can ask xp777 to restrict how your data is processed while a dispute or correction request is being resolved. Restricted data will not be used for any purpose other than storage.
Right to Portability
You can request your personal and gaming data in a machine-readable format (CSV or JSON) for transfer to another platform where technically feasible.
Right to Object
You can object to xp777 processing your data based on legitimate interests. We will review the objection and cease processing unless there are compelling grounds that override your rights.
To exercise any of the above rights, contact us via live chat on the xp777 platform or email support@xp777.im. We aim to respond to all data rights requests within 30 days. We may need to verify your identity before actioning a request to protect against unauthorised requests on behalf of other users.
11. Minors
xp777 is strictly an adult platform. We do not knowingly collect personal data from individuals under 18 years of age. Registration requires confirmation of age, and xp777 reserves the right to request identity documents to verify this at any time.
If we become aware that personal data has been collected from an individual under 18, that account will be immediately closed, all funds returned to the originating payment method, and all associated data deleted promptly. If you believe an underage person has registered on xp777, contact our support team immediately.
12. Changes to This Policy
xp777 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, or evolving legal requirements. When we make material changes we will:
- Update the "Last Updated" date at the top of this page.
- Post a notice on the xp777 platform informing players that the policy has been updated.
- Where changes are significant, send a notification to your registered mobile number or email address.
Continued use of xp777 after the updated policy is published constitutes acceptance of the revised terms. If you do not agree with changes to this policy, please stop using the platform and contact our support team to discuss closing your account.
13. Contact Us
For all privacy-related questions, data rights requests, or concerns about how xp777 handles your personal data, you can reach us through the following channels:
- Live Chat: Available 24/7 directly on the xp777 platform — fastest response, typically under 2 minutes.
- Email: support@xp777.im — for written privacy requests and formal data rights exercises.
We take privacy concerns seriously and aim to acknowledge all email queries within 24 hours with full resolution within 30 days. For urgent security concerns such as suspected unauthorised access to your account, please use live chat for immediate response.