Privacy Policy – xp777game Data Protection Commitments

xp777game is an online gaming platform operated at xp777game.bet, serving players based in Pakistan. When this Privacy Policy refers to "xp777game", "we", "us" or "our", it means the operator of xp777game.bet and all associated platform services.

For the purposes of this Privacy Policy, xp777game acts as the data controller — meaning xp777game determines the purposes and means of processing the personal data of registered players and platform visitors. If you have any questions about how xp777game handles your data, contact us at support@xp777game.bet at any time.

xp777game collects personal data at different stages of your interaction with the platform. The categories of data we may collect are set out below:

xp777game does not collect sensitive personal data — such as biometric data, health information or political opinions — as part of standard account registration or operation. The only document images collected are those required for identity verification and are treated with heightened security protections.

xp777game uses the personal data it collects for clearly defined purposes, all directly related to operating a safe, fair and functional gaming platform for Pakistani players. The main purposes are:

• Account operation: Creating and managing your xp777game account, verifying your identity, enabling login and keeping your account secure.
• Processing transactions: Processing PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card; processing withdrawal requests to your registered payment method; recording and confirming transaction history.
• Bet settlement: Recording bets placed, settling markets, calculating winnings and updating account balances accurately and in real time.
• Fraud prevention and security: Detecting unusual account activity, preventing identity fraud, blocking access attempts from unauthorised parties and investigating suspected money laundering or bonus abuse.
• Legal and regulatory compliance: Meeting anti-money-laundering (AML) obligations, responding to lawful requests from regulatory or law enforcement authorities and maintaining records required by applicable law.
• Platform improvement: Analysing aggregated usage data (anonymised where possible) to understand how players use xp777game and to improve the platform's features, performance and user experience.
• Customer support: Investigating and resolving account queries, payment disputes or technical issues reported by players.
• Responsible gaming: Monitoring account activity to identify patterns associated with problem gambling, administering self-exclusion requests and enforcing deposit and session limits set by the player.
• Marketing communications: Sending promotions, bonus offers and platform updates to players who have opted in to receive them. (See Section 11 for how to opt out.)

xp777game processes personal data on one or more of the following legal bases, depending on the specific type of processing involved:

• Contractual necessity: Processing required to perform the contract between you and xp777game — i.e., to provide your account, process bets and handle transactions. Without this processing, xp777game cannot operate your account.
• Legal obligation: Processing required to comply with applicable law — including anti-money-laundering regulations, identity verification requirements and lawful requests from authorities.
• Legitimate interests: Processing necessary for xp777game's legitimate interests in operating a secure platform — including fraud prevention, security monitoring and platform analytics — where those interests are not overridden by your privacy interests.
• Consent: Where xp777game relies on consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

xp777game uses cookies and similar tracking technologies to operate and improve the platform. Here is what that means in practice:

• Essential cookies: Required for the platform to function — keeping you logged in, maintaining session state and enabling secure transactions. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how players navigate xp777game — which pages are visited most, where sessions end and which features are used. This data is aggregated and anonymised before analysis. xp777game uses analytics to prioritise platform improvements.
• Preference cookies: Store your preferences — such as your preferred language, default bet size settings or table layout choices — so you don't have to reset them every visit.
• Security cookies: Help identify and block suspicious access patterns, replay attacks and session hijacking attempts.

xp777game does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on your device through the xp777game platform.

xp777game does not sell, rent or trade your personal data to any third party. However, to operate the platform, xp777game works with a small number of trusted third-party service providers who may process your data on xp777game's behalf. These are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processing networks receive your payment details as necessary to process deposits and withdrawals. Each provider operates under its own privacy policy and security standards.
• Identity verification services: Where CNIC verification is required, xp777game may use a third-party identity verification provider to confirm the authenticity of your documents. This provider processes your identity data only for verification purposes and does not retain it beyond what is necessary.
• Cloud and infrastructure providers: xp777game's platform is hosted on secure cloud infrastructure. The cloud provider processes technical data (server logs, etc.) as part of normal hosting operations, under strict data processing agreements with xp777game.
• Analytics providers: Aggregated, anonymised usage data may be processed by a third-party analytics provider to help xp777game understand platform usage. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: xp777game will disclose personal data to law enforcement, regulatory authorities or legal processes where required to do so by applicable law or a valid legal order. xp777game will notify you of any such disclosure where legally permitted to do so.

xp777game takes the security of your personal data seriously. The technical and organisational measures in place to protect your data include:

• Encryption in transit: All data transmitted between your device and xp777game is protected by TLS 1.3 encryption. This applies to account login, deposits, withdrawals, bet placement and all other platform interactions.
• Encryption at rest: Sensitive personal data — including identity documents and payment details — is encrypted in xp777game's database storage. This means that even in the event of an unauthorised database access, your data is not readable without the decryption keys.
• Password hashing: Your xp777game password is never stored in plain text. When you create a password, it is converted to a one-way cryptographic hash. Even xp777game staff cannot retrieve your original password.
• Access controls: Access to personal data within xp777game is restricted to staff who genuinely need it to perform their roles. Access is role-based, logged and reviewed periodically.
• PCI-DSS compliance: Payment card data is processed through PCI-DSS Level 1 compliant gateways. xp777game does not store full card numbers on its own servers.
• Security monitoring: xp777game operates continuous security monitoring across its platform to detect and respond to intrusion attempts, unusual access patterns and potential data breaches.

In the event of a data breach that poses a risk to your rights or freedoms, xp777game will notify affected players and the relevant authorities as required by applicable law, within the timeframes required.

xp777game retains personal data only for as long as is necessary for the purpose for which it was collected and for any legally required retention period that applies after the account is closed.

Once a retention period expires, xp777game will either delete the data securely or anonymise it so that it can no longer be linked to any individual. If you request account closure, xp777game will begin the deletion process for non-legally-required data within 30 days of confirming the closure.

As a registered xp777game player, you have the following rights over your personal data. To exercise any of these rights, contact xp777game at support@xp777game.bet with your account email and the specific right you wish to exercise. xp777game will respond within 30 days.

xp777game is strictly for adults aged 18 years and over. xp777game does not knowingly collect or process personal data of individuals under the age of 18. If you are under 18, you must not register an account or attempt to use xp777game.

If xp777game becomes aware that personal data of a minor has been collected, the account will be immediately suspended, all balances frozen pending investigation, and the data deleted in accordance with applicable law. If you believe a minor has registered an account on xp777game, please notify us immediately at support@xp777game.bet.

xp777game may send you promotional emails, SMS messages or in-platform notifications about bonuses, new features, cricket betting offers and other promotions — but only if you have opted in to receive such communications.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from xp777game.
• Updating your communication preferences in Account Settings under "Notifications".
• Contacting xp777game support at support@xp777game.bet and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional communications — xp777game will still send you account security alerts, deposit confirmations, withdrawal notifications and other messages directly related to your account and transactions. These communications are essential and cannot be turned off while your account remains active.

xp777game reserves the right to update this Privacy Policy at any time to reflect changes in how the platform operates, applicable legal requirements or industry best practice. When material changes are made, xp777game will notify registered players via the email address on their account before the changes take effect.

The "Last Updated" date at the top of this page will be revised each time any change is made — including minor corrections and clarifications. It is good practice to review this policy periodically, particularly before making a large deposit or sharing additional personal data with xp777game.

If you disagree with any updated version of this Privacy Policy, you should close your xp777game account before the effective date of the changes. Continued use of xp777game after the effective date constitutes acceptance of the revised policy.

For any privacy-related enquiry, data rights request or concern about how xp777game handles your personal data, please contact us using the details below:

• Email: support@xp777game.bet
• Subject line (for data requests): "Privacy / Data Request" followed by the type of request
• Live chat: Available 24/7 through the xp777game platform — for urgent privacy concerns
• Response time: Data rights requests handled within 30 calendar days of receipt

When submitting a data rights request by email, please include the email address associated with your xp777game account and a brief description of your request. xp777game may request additional verification of your identity before processing a data access or deletion request, to ensure that data is only disclosed or deleted at the request of the genuine account holder.