This Privacy Policy applies to all personal data collected and processed by XP 777 in connection with your use of the xp777.click platform. By registering an account with XP 777, you confirm that you have read this policy and consent to the processing of your personal data as described herein. If you do not agree, please do not register or use the platform.
This Privacy Policy was last reviewed and updated in January 2025. We encourage you to revisit this page periodically as we may update our practices from time to time.
1. Who We Are
XP 777 operates the online betting and gaming platform accessible at xp777.click. Throughout this Privacy Policy, "XP 777", "we", "us" and "our" refer to the operator of the xp777.click platform. "You" and "your" refer to any individual who visits, registers on or otherwise uses the XP 777 platform.
XP 777 is the data controller responsible for the personal information collected through the platform. This means we determine why and how your personal data is processed. If you have any questions about this Privacy Policy or the data we hold about you, you can reach us at support@xp777.click.
2. Personal Data We Collect
XP 777 collects only the personal data that is necessary to operate the platform, verify player identities, process payments and comply with our legal obligations. We do not collect excessive data or keep information we have no legitimate need for. The categories of data we may hold about you are set out in the table below:
| Data Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | |
| Contact Data | Mobile number, email address, residential address | |
| Account Data | Username, hashed password, account preferences, security settings | |
| Financial Data | Payment method details, PKR transaction records, deposit and withdrawal history | |
| Activity Data | Bets placed, games played, session times, bonus usage, cash-out history | |
| Technical Data | IP address, device type, browser version, operating system, cookies | |
| KYC Documents | CNIC scan, utility bill, bank statement, selfie for identity verification | For withdrawals |
| Communications Data | Support chat logs, email correspondence, complaint records | When applicable |
| Marketing Preferences | Whether you have opted in or out of promotional communications | Optional |
XP 777 does not collect sensitive personal data such as biometric information, health records, religious beliefs or political views. We also do not collect data from social media profiles unless you choose to link an account and explicitly grant us access.
3. How We Collect Your Data
XP 777 collects your personal data through the following channels:
3.1 Directly from You
- Registration form: Your name, email address, mobile number and date of birth are provided when you create your XP 777 account.
- KYC verification: Identity documents are submitted by you when completing the account verification process prior to your first withdrawal.
- Payment transactions: Payment method details are collected when you make a deposit or request a withdrawal.
- Customer support interactions: Any information you share with us when contacting support via live chat or email.
- Responsible gaming forms: When you set limits, request self-exclusion or submit a responsible gaming query, the information in that request is collected and stored.
3.2 Automatically
When you use the XP 777 platform, our systems automatically record certain technical information including your IP address, the device and browser you are using, the pages you visit within the platform, the duration of your sessions and interactions with specific features. This data helps us detect fraud, improve platform performance and ensure a consistent experience across devices.
3.3 Through Cookies and Similar Technologies
XP 777 uses cookies and similar tracking technologies to operate certain platform functions and gather technical analytics. Full details of our cookie usage are set out in Section 8 of this policy.
4. Why We Use Your Data
XP 777 uses personal data for specific, defined purposes. We do not use your data for any purpose beyond what is described here without first obtaining your consent or updating this Privacy Policy. The purposes for which we process your data are:
- Account creation and management: To register your account, verify your identity and maintain your account details accurately.
- Providing the platform: To allow you to place bets, play casino games, claim bonuses, make deposits and request withdrawals at XP 777.
- Payment processing: To process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card payments.
- Identity verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 18, and that your account is held in your own name.
- Fraud prevention and security: To detect and prevent fraudulent activity, account sharing, multi-accounting and money laundering on the XP 777 platform.
- Responsible gaming: To monitor betting activity for signs of problem gambling, manage limits and exclusion requests, and comply with responsible gaming obligations.
- Customer support: To respond to your queries, resolve disputes and handle complaints relating to your XP 777 account.
- Legal compliance: To comply with applicable laws and regulations, including anti-money-laundering (AML) obligations and data retention requirements.
- Platform improvement: To analyse how players use XP 777 and use those insights to improve the platform, fix bugs and develop new features.
- Marketing communications: To send you promotional offers, bonus notifications and seasonal promotions — but only if you have opted in. See Section 12.
5. Legal Basis for Processing
XP 777 processes personal data on the following legal bases:
- Contract performance: Processing that is necessary to provide the services you have requested — operating your account, processing bets and handling payments.
- Legal obligation: Processing required to comply with applicable laws — identity verification, AML checks and data retention obligations.
- Legitimate interests: Processing that serves a legitimate business interest of XP 777 where those interests are not overridden by your rights — fraud detection, security monitoring and platform analytics.
- Consent: Processing based on your explicit opt-in — marketing communications via email or SMS. You may withdraw consent at any time.
6. Who We Share Your Data With
XP 777 does not sell your personal data. We may share specific data with the following categories of third parties, strictly on a need-to-know basis and only for the purposes described in this policy:
6.1 Payment Processors
To process your PKR deposits and withdrawals, XP 777 shares the minimum necessary financial data with payment partners including Easypaisa, JazzCash, NayaPay, SadaPay and bank networks. These partners operate under their own privacy and data security frameworks. XP 777 does not transmit your full payment credentials to any partner — only the data necessary to complete the specific transaction.
6.2 Identity Verification Services
For KYC verification, XP 777 may use the services of specialist identity verification providers. These providers process your identity documents securely and return a verification result to XP 777. They do not retain your identity data for any purpose beyond the verification function.
6.3 Gaming Technology Partners
Live casino games at XP 777 are provided by Evolution Gaming and Ezugi. These providers receive limited session data necessary to operate the live tables. They do not receive your financial data, full name or contact details unless specifically required for a dispute resolution.
6.4 Regulatory Authorities
XP 777 may be required by law or court order to disclose personal data to regulatory authorities, law enforcement agencies or financial intelligence units. We will only do so when there is a legal obligation to comply and will disclose only the data specifically required by the relevant authority.
6.5 IT and Infrastructure Providers
XP 777 uses cloud hosting and IT infrastructure services to operate the platform. Our hosting providers may technically have access to data stored on our servers as part of their service delivery but are contractually prohibited from using that data for any purpose other than providing infrastructure services to XP 777.
In all cases where XP 777 shares personal data with third parties, we require those parties to maintain appropriate data security standards and to use the data only for the specific, limited purposes for which it was shared.
7. Payment Data and Financial Security
XP 777 takes the security of financial data with particular seriousness. Specific practices we apply to payment and financial data:
- XP 777 does not store full card numbers on its own servers. Card payment processing is handled by certified payment gateways that maintain their own PCI-DSS compliance.
- Easypaisa and JazzCash transactions are processed via secure API integrations with two-factor authentication at the wallet level — XP 777 never has access to your mobile wallet PIN or password.
- All deposit and withdrawal transaction records are logged with full audit trails for dispute resolution purposes.
- Withdrawal requests are manually reviewed by the XP 777 payments team before processing to verify that the request matches your registered account and payment method.
- Funds in your XP 777 PKR balance are segregated from XP 777 operational funds and are available for withdrawal at any time subject to the conditions in the Terms and Conditions.
8. Cookies and Tracking Technologies
XP 777 uses cookies — small text files stored on your device by your browser — and similar tracking technologies to operate certain features and gather usage analytics. We use the following types of cookies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Keeps you logged in, maintains your session, stores your bet slip state. The platform cannot function without these. | Session / 30 days | |
| Remembers your preferences such as language, odds format and table layout settings. | Up to 12 months | |
| Tracks how pages are used and where players encounter problems, helping XP 777 improve the platform. Data is aggregated and not linked to individual identities. | Up to 24 months | |
| Detects suspicious login patterns, helps prevent account takeover attempts and supports fraud prevention systems. | Session |
XP 777 does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the platform from functioning correctly.
9. Data Security
XP 777 implements a layered approach to data security. The technical and organisational measures we apply include:
- Encryption in transit: All data transmitted between your browser or device and XP 777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this is active.
- Encryption at rest: Personal data stored on XP 777 servers is encrypted at the database level. Even in the unlikely event of an infrastructure breach, stored data is unreadable without the decryption keys.
- Access controls: Access to personal data within XP 777's internal systems is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
- Two-factor authentication: Internal administrative systems at XP 777 require multi-factor authentication for all logins. We strongly recommend that players also enable two-factor authentication on their XP 777 account via the security settings page.
- Regular security reviews: XP 777 conducts periodic security audits of its platform infrastructure and data handling practices to identify and address vulnerabilities before they can be exploited.
- Incident response: In the event of a data breach that affects your personal information, XP 777 will notify affected players promptly and take immediate steps to contain and remediate the incident.
While we apply strong security measures, no online system is completely immune to all threats. We recommend that you use a strong unique password for your XP 777 account, never share your login credentials with anyone and keep your device and browser up to date.
10. How Long We Keep Your Data
XP 777 retains personal data for as long as is necessary for the purposes described in this policy and to comply with our legal obligations. Our standard retention periods are:
- Active account data: Retained for the duration of your account and for 5 years after account closure to meet anti-money-laundering record-keeping requirements.
- Financial transaction records: Retained for 7 years from the date of the transaction, consistent with standard financial record-keeping obligations.
- KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later.
- Customer support records: Retained for 2 years from the date of the last relevant interaction.
- Marketing preference records: Retained until you withdraw consent or for 2 years from your last interaction with a marketing communication, whichever comes first.
- Technical and analytics data: Retained in anonymised form for up to 24 months for platform improvement purposes.
When retention periods expire, personal data is securely deleted or anonymised. We do not archive data indefinitely.
11. Your Data Rights
As a player on XP 777, you have the following rights over your personal data. These are not just written commitments — they are things you can actually exercise by contacting us:
Right of Access
You can request a copy of all personal data XP 777 holds about you. We will provide this in a structured, readable format within 30 days of receiving your request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you can request that we correct it. Updates to basic account information can also be made directly through the account settings page.
Right to Erasure
You can request that XP 777 delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent, or where the data has been processed unlawfully. Erasure requests may be declined where retention is required by law.
Right to Data Portability
You can request a copy of your personal data in a machine-readable format (CSV or JSON) for the purpose of transferring it to another service. This right applies to data you provided directly to XP 777 that is processed on the basis of your consent or a contract.
Right to Object
You can object to XP 777 processing your data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though this right is subject to XP 777's ability to demonstrate compelling legitimate grounds that override your interests.
Right to Restrict Processing
In certain circumstances — for example while a data accuracy dispute is being resolved — you can request that XP 777 temporarily restrict processing of your personal data rather than deleting it entirely.
To exercise any of these rights, contact XP 777 support at support@xp777.click with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and fulfil it within 30 days. We do not charge a fee for data rights requests made in good faith.
12. Marketing Communications
XP 777 may send you promotional communications including bonus offers, PSL season promotions, new game announcements and platform updates. We will only send you these communications if you have given your explicit consent by opting in during the registration process or subsequently through your account notification settings.
Marketing communications are sent via email and SMS to the contact details you provided at registration. You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any promotional email from XP 777. You can opt out of SMS promotions by replying STOP to any promotional message. You can also manage all communication preferences from the Notifications section of your account settings.
Opting out of marketing communications will not affect your ability to receive transactional messages — for example, deposit confirmations, withdrawal notifications, bet settlement messages and security alerts. These messages are sent as part of the service and cannot be opted out of without closing your account.
13. Children and Minors
XP 777 is a platform exclusively for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered on XP 777 or that their personal data has been submitted to us in error, please contact support@xp777.click immediately. Upon verification, we will delete the data and permanently close the associated account.
XP 777 uses date of birth verification during registration and may require identity document confirmation as part of the KYC process specifically to ensure that no underage person is able to use the platform. If XP 777 discovers that an account belongs to a minor, the account will be closed, all balances forfeited and the matter referred to appropriate authorities where required.
14. Changes to This Privacy Policy
XP 777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top of the document.
For material changes — those that significantly affect your privacy rights or how your data is used — XP 777 will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. Your continued use of XP 777 after the notification period constitutes acceptance of the updated Privacy Policy.
We recommend that you review this page periodically. Previous versions of this Privacy Policy are available on request from support@xp777.click.
15. How to Contact Us About Privacy
If you have any questions, concerns or requests relating to this Privacy Policy or the personal data XP 777 holds about you, please get in touch through the following channels:
- Email (preferred for privacy matters): support@xp777.click — please use the subject line "Privacy Policy Query" or "Data Rights Request" to ensure your message is routed to the right team.
- Live chat: Available 24/7 from any page on the XP 777 platform when you are logged in. For data rights requests we recommend following up by email to create a written record.
We aim to acknowledge all privacy-related communications within 3 business days and to provide a full response within 30 days of receiving all information necessary to action your request.
This Privacy Policy was last reviewed and updated in January 2025 and supersedes all previous versions of the XP 777 Privacy Policy.
This Privacy Policy should be read alongside the XP 777 Terms and Conditions and Responsible Gaming page. Together these documents set out the complete framework governing your use of XP 777 and how we handle your personal information.