xt777 Privacy Policy

xt777 (hereinafter "xt777," "we," "us," or "our") is the data controller responsible for the personal information of all registered users of the xt777 platform available at xt777.org. As data controller, xt777 determines the purposes and means by which your personal information is processed.

xt777 operates an internationally licensed online casino and sports betting platform built specifically for Pakistani players, offering cricket betting, live casino games, slot titles, e-sports markets, and related gaming services. The processing of personal data is an inherent and necessary part of delivering these regulated services safely, legally, and responsibly.

If you have any questions about how xt777 processes your personal data, or wish to exercise any of your data rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

xt777 collects personal data through several channels: directly from you when you register or use the Platform, automatically through your use of the Platform, and in limited circumstances from third-party sources such as payment processors and identity verification providers. The categories of personal data xt777 processes are as follows:

xt777 does not collect any special category personal data (also known as sensitive personal data) as defined under applicable data protection legislation, including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity document verification.

xt777 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law:

• Account Registration and Management: To create, verify, and maintain your xt777 account, authenticate your identity at login, and administer your account settings and preferences.
• Service Delivery: To provide you access to all xt777 gaming services, process your bets and wagers, credit winnings to your account, and operate all features of the Platform including live casino, cricket betting, slots, and e-sports.
• Payment Processing: To facilitate deposits into and withdrawals from your xt777 account via JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank — including the verification of transaction legitimacy and compliance with anti-money laundering requirements.
• Regulatory Compliance: To meet xt777's obligations under its international gaming licence, including Know Your Customer (KYC) verification, anti-money laundering (AML) screening, age verification, and the provision of data to regulatory authorities where legally required.
• Responsible Gaming: To monitor player activity for signs of problematic gambling behaviour, enforce self-exclusion and deposit limit settings, and comply with responsible gaming obligations under our licence.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and any other unauthorised or illegal use of the xt777 Platform.
• Customer Support: To respond to your enquiries, resolve complaints, process disputes, and communicate important account or platform updates to you.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have consented to receive such communications and have not subsequently opted out.
• Platform Improvement: To analyse aggregated usage data to improve the performance, design, and feature set of the xt777 Platform for all Pakistani players.

xt777 processes your personal data only where we have a valid legal basis to do so. The legal bases on which xt777 relies for processing personal data are as follows:

• Contract Performance: Processing necessary to enter into or perform the contract between you and xt777, including account registration, service delivery, and payment processing.
• Legal Obligation: Processing necessary for xt777 to comply with legal and regulatory obligations under our gaming licence, including KYC, AML, and age verification requirements.
• Legitimate Interests: Processing necessary for xt777's legitimate business interests where these are not overridden by your fundamental rights and freedoms — including fraud prevention, security monitoring, and Platform improvement analytics.
• Consent: Where xt777 relies on your consent as the legal basis for processing — specifically for marketing communications — you retain the right to withdraw that consent at any time without detriment to your xt777 account or access to platform services.

xt777 uses cookies and similar tracking technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device when you visit the xt777 website. Cookies allow the Platform to recognise your device, remember your preferences, and provide a personalised and functional experience.

• Strictly Necessary Cookies: These cookies are essential for the xt777 Platform to function. They enable core features such as login session management, game loading, and secure payment flows. These cookies cannot be disabled without significantly impairing your ability to use xt777.
• Functional Cookies: These cookies remember your preferences such as language settings, currency display, and interface customisations to improve your experience across sessions.
• Analytics Cookies: These cookies collect anonymised data about how players use the xt777 Platform — such as which pages are visited most frequently and which features generate the most engagement — to help us improve the Platform over time.
• Security Cookies: These cookies support xt777's fraud detection and account security systems, including detecting unusual login patterns or suspicious activity on your account.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies categorised as strictly necessary will impair Platform functionality. xt777 does not use third-party advertising cookies or tracking pixels that follow your activity beyond the xt777 website itself.

xt777 does not sell, rent, or trade your personal data. We share your personal information with third parties only in the following defined circumstances, each of which is subject to appropriate contractual data protection safeguards:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers are independent data controllers for their own payment processing operations.
• Identity Verification Providers: xt777 uses regulated third-party KYC service providers to verify your identity and age. These providers process identity document images and verification data on xt777's behalf under strict data processing agreements.
• Game Software Providers: Third-party game suppliers including Ezugi, Evolution, Pragmatic Play, and NetEnt may receive anonymised player session data necessary to deliver their games. These providers do not receive your personally identifiable information without a separate data processing arrangement.
• Regulatory and Law Enforcement Authorities: xt777 will disclose your personal data to regulatory bodies, gaming authorities, law enforcement agencies, or courts where required to do so by law, legal process, or our gaming licence obligations.
• Anti-Money Laundering Services: xt777 uses regulated AML screening services that process your name and transaction data to detect financial crime patterns as required under our regulatory obligations.

As an internationally licensed online gaming platform, xt777 operates infrastructure and uses service providers located in multiple jurisdictions. As a result, your personal data may be transferred to, stored in, and processed in countries outside Pakistan.

Where personal data is transferred internationally, xt777 takes all reasonable steps to ensure that appropriate protections are in place, including:

• Entering into standard contractual data protection clauses with recipient entities that establish binding data protection obligations equivalent to those applicable in your jurisdiction;
• Transferring data only to countries or organisations that provide an adequate level of data protection as assessed by the applicable regulatory framework;
• Conducting transfer impact assessments where required by applicable data protection standards to ensure the adequacy of protections in the destination jurisdiction.

xt777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply to the primary categories of personal data xt777 holds:

At the end of each applicable retention period, xt777 will securely delete or permanently anonymise your personal data so that it can no longer be associated with your identity. Anonymised aggregated data may be retained beyond these periods for statistical and platform improvement purposes.

Subject to applicable data protection law and xt777's regulatory obligations, you hold the following rights in respect of your personal data held by xt777. All rights requests are free of charge and will be responded to within 30 calendar days of receipt of a valid request:

The xt777 Platform is strictly intended for adults aged 21 years and above. xt777 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the xt777 account registration and KYC process.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on the xt777 Platform using false age information, please contact xt777 support immediately at the contact details provided in Section 14. We will treat all such reports with the highest urgency.

xt777 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All personal and financial data is encrypted at rest using AES-256 encryption. All data transmitted between your device and the xt777 Platform is protected using TLS 1.3 (Transport Layer Security), the current industry standard for secure web communications.
• Access Controls: Access to systems containing personal player data is restricted to authorised xt777 employees on a strict need-to-know basis. All access is logged, monitored, and subject to regular internal audit.
• Two-Factor Authentication: xt777 supports and encourages the use of two-factor authentication (2FA) for all player accounts as an additional layer of identity protection at login.
• Penetration Testing: xt777's platform infrastructure undergoes regular third-party security audits and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: xt777 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, xt777 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

Whilst xt777 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your own xt777 account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

xt777 may send you marketing communications — including information about new games, promotional bonuses, special offers, and platform features — where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

xt777 marketing communications may be delivered via the following channels, subject to your stated preferences:

• SMS messages to your registered Pakistani mobile number;
• Email to your registered email address;
• In-Platform notifications visible when you are logged into your xt777 account;
• Push notifications through the xt777 mobile application, where applicable.

xt777 will never send marketing communications to players who have activated self-exclusion on their account. Self-excluded accounts are immediately removed from all marketing contact lists for the duration of the exclusion period.

xt777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. All changes will be published on this page with an updated effective date.

Where changes to this Privacy Policy are material — meaning they significantly affect how xt777 uses your personal data or impact your data rights — xt777 will notify you in advance via your registered mobile number or a prominent Platform notice, where reasonably practicable, at least 7 days before the changes take effect.

We recommend that all xt777 users review this Privacy Policy periodically to remain informed of how their personal data is being processed. The version number and last updated date displayed at the top of this page indicate the currency of the policy you are reading.

For all enquiries, requests, or complaints relating to this Privacy Policy or xt777's handling of your personal data, please contact the xt777 Data Protection Officer through the following channels:

xt777 is committed to resolving all data privacy enquiries and rights requests promptly and transparently. If you are not satisfied with xt777's response to a privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

For concerns specifically related to responsible gaming and account self-exclusion, please visit the xt777 Responsible Gaming page for dedicated support resources and tools.