At xp777, your privacy is taken seriously. This Privacy Policy explains in plain, honest terms what personal information we collect when you use Pakistan's premier online gaming platform, why we collect it, how it is used and stored, who it may be shared with, and what rights you hold over your own data. This policy applies to all xp777 registered players and website visitors.
Our Privacy Commitments
xp777 processes personal data in accordance with internationally recognised data protection principles. These six commitments are the foundation of every data-handling decision on the platform.
xp777 collects and processes your personal data only on lawful legal bases — principally contractual necessity, regulatory compliance, and legitimate interest. We never process data in secret. This Privacy Policy is the complete disclosure of how your information is used on the xp777 platform.
You will always be informed before any significant new data processing activity is introduced that affects your xp777 account.
Data collected for one purpose on xp777 is not silently repurposed for unrelated uses. Your mobile number, collected for account verification, is not later used for mass marketing without your explicit opt-in.
xp777 collects only the personal data that is genuinely necessary for the specific purpose it is collected for. We do not collect additional data speculatively or for future undefined uses.
xp777 takes reasonable steps to ensure that the personal data it holds about you is accurate and kept up to date. You can update your account information at any time through the xp777 account settings panel.
All personal data held by xp777 is protected using 256-bit SSL encryption during transmission and encrypted storage at rest. Access to personal data within xp777's systems is restricted on a strict need-to-know basis. We maintain technical and organisational security measures appropriate to the sensitivity of the data we hold, including regular security auditing of the xp777 platform infrastructure.
xp777 retains personal data only for as long as it is required for the purpose it was collected, or as mandated by applicable regulatory retention obligations. When retention periods expire, data is securely deleted.
xp777 ("we", "us", "the Platform", "xp777") is the data controller responsible for the personal information collected and processed through the xp777.bio website and associated gaming platform. xp777 operates under an international gaming license and is committed to handling personal data lawfully, fairly, and transparently in accordance with applicable international data protection standards.
xp777 serves players across Pakistan, including those based in Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Multan, Peshawar, and throughout all four provinces. The platform is accessible entirely in English and processes all financial transactions in Pakistani Rupees (PKR).
xp777 collects personal data in the following categories. Not all categories apply to every player — the data collected depends on the nature and extent of your engagement with the platform.
When you register an xp777 account or complete KYC (Know Your Customer) verification, we collect: your full legal name, date of birth, Pakistani national identity card (CNIC) number or passport number, gender, residential address, and mobile telephone number registered in Pakistan.
To process deposits and withdrawals in PKR, xp777 collects: JazzCash or EasyPaisa wallet numbers, bank account details (IBAN, account title, bank name) where bank transfers are used, and transaction reference numbers. xp777 does not store full debit or credit card numbers on its servers — card transactions are tokenised through certified payment processors.
xp777 maintains a complete record of your gaming and betting history on the platform, including: bet amounts, game types played (cricket betting, PSL markets, slots, live casino, fishing games), session duration, wager outcomes, bonus usage and wagering progress, and deposit and withdrawal history.
When you access the xp777 platform, we automatically collect certain technical information including: your IP address, device type and model, operating system, browser type and version, mobile network operator (Jazz, Telenor, Zong, Ufone, etc.), screen resolution, preferred language settings, and timestamps of login and logout events.
If you contact xp777 Support via live chat or email, we retain records of those communications — including the content of your messages, attachments sent, and the Support team's responses — for quality assurance, training, and dispute resolution purposes.
When required for identity verification or enhanced due diligence under our Anti-Money Laundering obligations, xp777 may collect copies of government-issued identity documents (CNIC front and back, passport bio-data page), proof of address documents (utility bills, bank statements), and in some cases a selfie or live liveness-verification photograph.
| Data Category | Examples | Collected At |
|---|---|---|
| Identity | Name, DOB, CNIC, gender | Registration & KYC |
| Financial | JazzCash/EasyPaisa number, bank IBAN | First deposit / withdrawal |
| Gaming Activity | Bets, game sessions, PSL wagers | Ongoing platform use |
| Technical | IP address, device, mobile network | Every session |
| Communications | Live chat logs, support emails | When you contact xp777 |
| KYC Documents | CNIC scan, utility bill | Verification request |
xp777 collects personal data through the following channels:
xp777 uses the personal data it holds for the following defined purposes. We do not use your data for any purpose not listed here without first notifying you and, where required, obtaining your consent.
xp777 processes your personal data on the following legal bases under applicable data protection frameworks:
xp777 does not sell your personal data to third parties. We share personal data only in the following defined circumstances:
To execute your PKR deposit and withdrawal instructions, xp777 shares necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK payment infrastructure providers. These processors receive only the data necessary to complete the specific transaction and are bound by data processing agreements with xp777.
To conduct KYC and AML compliance checks, xp777 shares identity document data with contracted identity verification service providers. These providers operate under strict confidentiality obligations and are prohibited from using your data for any purpose beyond the verification service they provide to xp777.
xp777's casino and sportsbook is powered in part by third-party game studios and technology providers. These providers may receive anonymised session identifiers necessary to deliver their game content to you during a live casino or slot session. They do not receive your full name, CNIC, mobile number, or financial details.
xp777 will disclose personal data to its licensing regulatory body, financial intelligence units, law enforcement agencies, or courts where it is legally required to do so by applicable law, court order, or legitimate regulatory direction. In such cases, xp777 will disclose only the minimum data necessary and will seek to notify the player where legally permissible.
In the event of a merger, acquisition, or sale of all or part of xp777's business operations, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and the privacy protections applicable to their data under the successor entity.
The xp777 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure experience. The following categories of cookies are used:
You may manage cookie preferences through your browser settings. Disabling performance or functional cookies will not prevent you from using xp777, but may reduce the quality of your experience. Disabling strictly necessary cookies may prevent access to core platform features including the xp777 cashier and live game sessions.
xp777 retains personal data for the following periods, based on the category of data and the regulatory requirements applicable to our gaming licence:
Following the expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with an identifiable individual.
Subject to applicable law and regulatory limitations, xp777 recognises and facilitates the following rights for all registered players in relation to their personal data:
To exercise any of the above rights, submit your request to xp777 by email at [email protected] with the subject line "Data Rights Request" and your registered xp777 mobile number for account identification. xp777 will respond within 30 calendar days of receiving a valid, complete request. Where the request is complex or requires regulatory consultation, we will notify you within 30 days of the need for an extension of up to a further 60 days.
xp777 is strictly an adults-only platform for individuals aged 21 years and over. xp777 does not knowingly collect personal data from, or direct gaming services at, any person under the age of 21. Where xp777 discovers or reasonably suspects that a registered account is held by a person under 21, that account will be immediately suspended, any balance will be withheld pending investigation, and all personal data collected in connection with the underage account will be processed exclusively for regulatory notification purposes and then deleted in accordance with applicable law.
xp777 employs age verification mechanisms during the registration process and may request documentary age verification at any time during a player relationship. If you are a parent or guardian and believe that a minor in your household has accessed or registered an account on xp777 without authorisation, please contact xp777 Support immediately at [email protected].
xp777 primarily operates its data processing infrastructure within jurisdictions that maintain adequate data protection standards as recognised under international frameworks. Where personal data is transferred across international borders — for example, to a game content provider or technology sub-processor operating in a different country — xp777 ensures that appropriate transfer safeguards are in place, such as standard contractual clauses, data processing agreements incorporating equivalent data protection standards, or transfer to jurisdictions recognised as providing an adequate level of protection.
For players based in Pakistan, please be aware that xp777's platform infrastructure and its licensed operational entity may be located in a jurisdiction outside Pakistan. By registering an xp777 account, you acknowledge and consent to the transfer of your personal data to such jurisdictions as necessary to provide the xp777 service.
xp777 implements a comprehensive set of technical and organisational security measures to protect the personal data it holds against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
The xp777 platform does not contain links to external third-party websites. However, in the event that such links are added in future (for example, responsible gaming resource links), xp777 is not responsible for the privacy practices or content of those third-party websites. Each external site will have its own privacy policy and terms of use. xp777 encourages players to read the privacy policy of any third-party website before providing personal information to that site.
xp777 may send you promotional SMS messages, email updates about new games, PSL betting market announcements, bonus offers, and other marketing communications only where you have explicitly opted in to receive such communications at the time of registration or subsequently through your xp777 account communication preferences.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal, nor does it affect xp777's right to send you non-promotional service communications — such as transaction confirmations, account security alerts, KYC verification requests, and responsible gaming notifications — which are sent on the basis of contractual necessity and regulatory obligation regardless of marketing preferences.
xp777 reserves the right to update and amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business operations, or data processing practices. Material changes to this Privacy Policy — meaning changes that affect how we collect, use, or share your personal data in significant ways — will be communicated to registered players by SMS notification to their registered Pakistani mobile number at least 14 days before the changes take effect.
Minor updates and clarifications to this Privacy Policy may be made without individual notification, and will be indicated by an updated version number and effective date at the top of this page. The current version of this Privacy Policy is always available at xp777.bio/privacy-policy. Continued use of the xp777 platform following the effective date of any Privacy Policy update constitutes your acceptance of the revised policy.
For all privacy-related enquiries, data subject rights requests, or complaints about the way in which xp777 handles your personal data, please contact us through the following channels:
xp777 will acknowledge all privacy-related correspondence within 72 hours and will provide a substantive response to formal data rights requests within 30 calendar days.
If you are dissatisfied with xp777's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction of our gaming licence, or to the dispute resolution body specified under our licensing framework. xp777 will cooperate fully with any supervisory authority investigation relating to the privacy rights of our players.
Your data is protected every step of the way. Log in to your xp777 account to manage your privacy settings, update your responsible gaming limits, or simply enjoy cricket betting, live casino, and 500+ slots. 21+ only.