xa777 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by xa777 ("xa777," "we," "us," or "our") and describes how xa777 collects, uses, stores, discloses, and otherwise processes personal data in connection with the operation of the xa777 online gaming platform at xa777.org, including all casino games, sports betting services, live dealer products, and related customer support functions (collectively, the "Services").

This Policy applies to all individuals who access or use the Services, including registered players, applicants whose registration was not completed, and visitors who browse xa777.org without registering ("you" or "User"). By accessing xa777.org or registering an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

xa777 collects personal data through a number of channels and for a variety of purposes. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you register an xa777 account, we collect your full legal name, date of birth, CNIC (Computerised National Identity Card) number, residential address, city (Karachi, Lahore, Islamabad, Faisalabad, or otherwise), email address, and mobile phone number. This information is mandatory for account creation and is used to verify your identity and confirm that you meet the minimum age requirement of 21 years.

2.2 Financial & Payment Data

xa777 collects transaction records, including deposit and withdrawal amounts, transaction dates and times, and the payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank). xa777 does not store full payment account credentials on its own servers. Payment processing is handled by PCI-DSS compliant third-party payment processors who are bound by strict data handling obligations.

2.3 Gaming & Activity Data

xa777 records your gameplay activity, including games played, bet amounts, wagering history, session durations, bonus usage, and account balance movements. This data is used for account management, fraud prevention, dispute resolution, and responsible gaming monitoring purposes.

2.4 Technical & Device Data

When you access xa777.org, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, time zone setting, and pages visited. This data is collected via cookies and server logs as described in Section 6.

2.5 Communications Data

If you contact xa777's customer support team — via email, live chat, or any other channel — xa777 retains records of those communications, including the content of messages and any documents you submit. These records are retained for quality assurance, training, and dispute resolution purposes.

2.6 Verification Documents

During the Know Your Customer (KYC) process, xa777 collects copies of government-issued identity documents (CNIC), proof of address documents, and payment method ownership evidence. These documents are stored securely and processed solely for identity verification and anti-money laundering compliance purposes.

Data Category	Examples	Collected At
Identity Data	Full name, CNIC, date of birth, address	Registration, KYC
Contact Data	Email address, mobile number	Registration
Financial Data	Transaction history, payment method type	Deposit / Withdrawal
Gaming Data	Bet history, session logs, game preferences	Active gameplay
Technical Data	IP address, device ID, browser type	Site visit
Communications Data	Support chat logs, email correspondence	Customer contact

3. How We Use Your Personal Data

xa777 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your xa777 account, including processing deposits and withdrawals in PKR.
• Identity Verification: To verify your identity, confirm your age (21+), and fulfil KYC obligations required under our international gaming licence.
• Service Delivery: To provide access to xa777 casino games, cricket and PSL betting markets, live dealer tables, and all other Services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited activity.
• Responsible Gaming: To monitor gameplay patterns and identify signs of problem gambling, apply deposit limits, and administer self-exclusion requests.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance.
• Legal Compliance: To fulfil obligations under applicable anti-money laundering, counter-terrorism financing, and other applicable laws and regulations.
• Marketing Communications: To send you promotional offers, bonus notifications, and xa777 news — but only where you have given explicit consent and subject to your right to opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the overall xa777 user experience across all devices.
• Dispute Resolution: To investigate and resolve disputes relating to bets, bonuses, payments, or any other aspect of xa777 Services.

4. Legal Basis for Processing

xa777 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases relied upon are:

• Contract Performance: Processing necessary for the performance of the contract between you and xa777 — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required for compliance with applicable legal obligations, including KYC, anti-money laundering requirements, and record-keeping obligations imposed by xa777's licensing authority.
• Legitimate Interests: Processing carried out for xa777's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in respect of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

5. Data Sharing & Disclosure

xa777 does not sell your personal data. xa777 may share your personal data with the following categories of third parties in the following circumstances:

• Payment Processors: xa777 shares necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank for the purpose of processing deposits and withdrawals. These providers are contractually bound to process your data solely for payment purposes.
• Identity Verification Providers: xa777 engages accredited third-party KYC providers to assist in verifying player identities and CNIC documentation. These providers act as data processors under xa777's instructions.
• Gaming Technology Providers: Game content and platform software is supplied by licensed third-party technology providers who may receive limited gameplay data for technical support and licence compliance purposes.
• Regulatory & Law Enforcement Authorities: xa777 will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required by applicable law, court order, or regulatory demand.
• Fraud Prevention Agencies: xa777 may share data with industry fraud prevention bodies and shared fraud databases where necessary to protect xa777 and its players from financial crime.
• Professional Advisers: xa777 may share personal data with legal counsel, auditors, and other professional advisers where necessary for the conduct of xa777's business, subject to strict confidentiality obligations.

6. Cookies & Tracking Technologies

xa777 uses cookies and similar technologies (collectively, "Cookies") on xa777.org to provide, secure, and improve the Services. The types of Cookies xa777 uses are:

• Strictly Necessary Cookies: Essential for the operation of xa777.org, including session management, login authentication, and security features. These cannot be disabled without impairing the functionality of the Services.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have set, so that xa777 can provide a personalised experience on subsequent visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with xa777.org — such as which pages are visited most frequently and how long sessions last. This information is used to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, including the identification of bot traffic, credential stuffing attacks, and multi-accounting attempts.

xa777 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. You may configure your browser to reject or delete Cookies; however, doing so may affect the functionality of certain features of the Services.

7. Data Retention

xa777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the lifetime of your xa777 account and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction & Financial Data: Retained for a minimum of five (5) years from the date of each transaction for regulatory and audit purposes.
• KYC Documentation: Retained for five (5) years following the end of the business relationship, or longer where required by the licensing authority.
• Customer Support Communications: Retained for three (3) years from the date of the most recent communication in a support thread.
• Technical & Device Data: Retained for up to twelve (12) months in server logs, used for security monitoring and fraud detection.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, xa777 will securely delete or anonymise your personal data in accordance with its data destruction procedures.

8. Your Data Protection Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data xa777 holds about you:

• Right of Access: You may request a copy of the personal data xa777 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data xa777 holds about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xa777's legal retention obligations.
• Right to Restriction: You may request that xa777 restricts the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: You may request that xa777 provides your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to processing based on xa777's legitimate interests, including profiling for responsible gaming purposes, where you believe your interests override xa777's.
• Right to Withdraw Consent: Where xa777 processes your data based on consent (such as for marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Request." xa777 will respond within thirty (30) calendar days. We may need to verify your identity before processing your request.

9. Children & Minors

xa777 Services are strictly intended for adults aged 21 years and over. xa777 does not knowingly collect personal data from individuals under the age of 21. If xa777 discovers or has reason to believe that an account has been registered by a person under 21, xa777 will immediately suspend the account, void all associated activity, and securely delete the personal data of the minor in accordance with applicable law.

If you are a parent or guardian and believe your child has registered an xa777 account, please contact xa777 immediately at [email protected]. xa777 will act promptly to investigate and resolve the matter.

10. Security Measures

xa777 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and xa777.org.
• Encryption of sensitive data at rest, including KYC documentation and financial records.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular penetration testing and vulnerability assessments of xa777's technical infrastructure.
• Two-factor authentication (2FA) for internal administrator access to data systems.
• Automated monitoring and alerting for suspicious access patterns and potential data breach indicators.
• Documented incident response procedures for the identification, containment, and reporting of personal data breaches.

Notwithstanding these measures, no online platform can guarantee absolute security. xa777 encourages all players to use strong, unique passwords for their xa777 account and to enable two-factor authentication where available.

11. International Data Transfers

xa777 operates under an international gaming licence, and some of the third-party service providers engaged by xa777 may be located outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection, xa777 will ensure that appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, to protect your data to a standard consistent with this Policy.

By using xa777's Services, you acknowledge and agree that your personal data may be transferred to, processed, and stored in countries outside Pakistan where xa777's third-party processors operate, subject to the safeguards described in this section.

12. Third-Party Links

xa777.org may contain references to third-party services or payment platforms (such as JazzCash or EasyPaisa) that operate their own independent privacy policies. xa777 is not responsible for the privacy practices of third-party websites or services accessed via xa777.org. We encourage you to read the privacy policy of any third-party service you use in connection with xa777.

13. Changes to This Privacy Policy

xa777 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where xa777 begins processing personal data for a new purpose not previously disclosed — xa777 will provide advance notice to registered players via email or via an on-platform notification at least fourteen (14) days before the change takes effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. It is your responsibility to review this Policy periodically. Continued use of xa777's Services following the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a complaint about xa777's handling of your personal data, please contact xa777's Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Query" or "Data Subject Request"
• Response Time: Within 30 calendar days for data subject requests; within 5 business days for general queries.
• Languages: English and Urdu

xa777 takes all privacy complaints seriously and will investigate every formal complaint thoroughly. If you are not satisfied with xa777's response to your complaint, you may escalate the matter to the relevant data protection supervisory authority under xa777's licensing jurisdiction.

For matters related to responsible gaming, self-exclusion, or account restrictions, please also visit xa777's Responsible Gaming page. For the full terms governing your use of xa777, please review our Terms & Conditions.