xb777 Privacy Policy

This Privacy Policy describes how xb777 ("xb777", "we", "us", "our"), operating at xb777.pro under an international gaming licence, collects, uses, stores, and protects the personal data of its registered players and website visitors. This document applies to all individuals who access or use the xb777 platform, including players based in Pakistan and any other permitted jurisdictions.

xb777 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection frameworks. We recognise that Pakistani players trust us with sensitive financial and personal information, and we treat that trust as a core operational obligation — not merely a legal formality.

By registering an account on xb777 or continuing to use the platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. This document forms part of the xb777 Terms & Conditions, available at xb777.pro/terms-conditions.

xb777 collects the following categories of personal data. We have structured this section using a clear table format so you can see exactly what we collect, why we collect it, and how long we retain it:

xb777 does not collect special category data (such as health, religious, or political data) and has no legitimate basis for doing so. If you believe we have inadvertently received such data, please contact support@xb777.pro immediately for deletion.

xb777 collects personal data through the following channels:

• Direct Registration: When you create an account on xb777.pro, you provide identity, contact, and account preference data directly through the registration form.
• KYC Verification: When completing our Know Your Customer process, you submit identity documents such as CNIC copies, selfies, and proof of address. These are transmitted securely and stored in our encrypted KYC vault.
• Payment Transactions: When you make a deposit or request a withdrawal using JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, or Meezan Bank, our payment processing systems capture the transaction reference and account details required to complete the operation.
• Platform Usage: As you navigate xb777, our servers automatically log technical data including your IP address, device identifiers, pages visited, games accessed, and session timestamps. This happens through standard server-side logging and first-party cookies.
• Customer Support Interactions: When you contact our support team via live chat or email, the content of those interactions is recorded for quality assurance and dispute resolution purposes.
• Third-Party Payment Processors: Our licensed payment partners may share transaction status data with xb777 to confirm deposit completion or withdrawal success. These partners are contractually bound to share only the minimum data required.

xb777 uses your personal data for the following specific purposes. Each use case is tied to a legitimate legal basis described in Section 5:

• Account Administration: Creating, maintaining, and securing your xb777 player account; processing your login sessions; and managing account settings including deposit limits and responsible gaming tools.
• Identity & Age Verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 21 years, in accordance with our international gaming licence obligations.
• Transaction Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, and bank transfer channels, and processing withdrawal requests back to your registered payment method.
• Fraud & AML Compliance: Monitoring account activity for signs of fraudulent behaviour, money laundering, bonus abuse, or multi-accounting. xb777 is obligated under its gaming licence to maintain robust anti-money laundering controls.
• Responsible Gaming: Using gameplay data to identify patterns that may indicate problem gambling, and proactively offering tools such as deposit limits, session reminders, and self-exclusion options to affected players.
• Customer Support: Using your contact and account data to respond to support queries, process complaints, and resolve disputes in a timely manner.
• Platform Improvement: Using aggregated, anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience on xb777.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have explicitly opted in to marketing communications. You can opt out at any time via Account Settings or by emailing support@xb777.pro.
• Legal Compliance: Retaining financial and identity records as required by our international gaming licence authority and applicable anti-money laundering regulations.

xb777 processes personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the player account agreement — including account creation, transaction processing, and KYC verification — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering obligations, and age verification requirements is carried out on the basis of legal obligation. This processing cannot be opted out of.
• Legitimate Interest: Processing carried out for fraud prevention, platform security, technical logging, and responsible gaming monitoring is based on xb777's legitimate interest in operating a safe and compliant platform. We conduct a balancing test to ensure these interests do not override your privacy rights.
• Consent: Processing for marketing communications is based solely on your explicit consent, which you provide at registration (opt-in) and may withdraw at any time without affecting the operation of your account.

xb777 does not sell, rent, or commercially trade personal data. We share data only in the following limited and controlled circumstances:

• Payment Partners: Licensed payment processors (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan) receive the transaction data required to process your deposits and withdrawals. These partners are bound by their own regulatory obligations and our data processing agreements.
• KYC & Identity Verification Providers: We may use licensed third-party identity verification services to cross-check document authenticity during the KYC process. These providers are contractually restricted from using your data for any purpose other than the verification task.
• Gaming Licence Authority: xb777's international gaming regulator may require access to player records for audit, compliance review, or investigation purposes. Such disclosures are mandatory under our licence conditions.
• Fraud Prevention Networks: xb777 may share data with cross-platform fraud prevention systems to identify and block known bad actors. Individually identifiable data is not shared beyond what is required for the specific risk indicator.
• Legal Authorities: xb777 will disclose personal data to law enforcement or government bodies where required by a valid legal order, court directive, or regulatory instruction. We will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving xb777, player data may be transferred as part of the transaction. Players will be notified in advance and given the opportunity to delete their accounts before any transfer takes effect.

xb777 uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with the site. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-used payment method, and responsible gaming tool settings. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to understand aggregate player behaviour on the platform — which pages are visited most, where players encounter errors, and how the registration funnel performs. Data is anonymised and used only internally for platform improvement.
• Marketing Cookies: Only placed with your explicit consent. Used to ensure that any promotional communications you receive are relevant to your actual interests and activity on xb777. You may opt out of marketing cookies at any time via your browser settings or Account Settings.

You can manage cookie preferences through your browser settings at any time. Blocking essential cookies will affect your ability to log in and use the xb777 platform. Blocking functional and analytics cookies will not prevent you from playing but may affect your experience.

xb777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by our international gaming licence and applicable legal obligations. The general retention principles are:

• Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of 7 years following the transaction date, in line with standard financial record-keeping obligations applicable to licensed gaming operators.
• Identity and KYC documents are retained for a minimum of 5 years following account closure.
• Support communications and complaint records are retained for 3 years following account closure, to support potential dispute escalation.
• Technical logs (IP addresses, device data, session logs) are retained on a rolling 12-month basis, after which older records are automatically purged.
• Marketing preference data is deleted within 6 months of an opt-out request being processed.

When the retention period for a category of data expires, xb777 securely deletes the data or anonymises it such that it can no longer be associated with any individual player. Anonymised and aggregated data may be retained indefinitely for statistical analysis and platform development.

As an xb777 player, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to support@xb777.pro with the subject line "Data Rights Request" and your registered username:

xb777 implements a multi-layered security architecture to protect your personal and financial data from unauthorised access, loss, alteration, or disclosure. Our key technical and organisational security measures include:

• Transport Security: All data transmitted between your device and xb777 servers is encrypted using TLS 1.3. Older, less secure protocol versions are disabled across all xb777 infrastructure.
• Data Encryption at Rest: Sensitive data fields including identity documents, payment method details, and KYC records are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented operational need can access specific data categories, and all access is logged and audited.
• Two-Factor Authentication: All xb777 player accounts support and are encouraged to enable two-factor authentication (2FA) for login. Internal administrative accounts require 2FA without exception.
• Penetration Testing: xb777 engages independent security firms to conduct regular penetration testing of the platform. Critical vulnerabilities are patched on a priority basis.
• Incident Response: In the event of a confirmed data breach that poses a risk to player rights, xb777 will notify affected players within 72 hours of becoming aware of the incident, detailing the nature of the breach, the data involved, and the remediation steps being taken.

xb777 employs age verification checks during the registration process and reserves the right to request documentary proof of age at any point during a player's lifecycle on the platform. Where we have reasonable grounds to believe that a registered account belongs to a person under 21 years of age:

• The account will be immediately suspended pending age verification review.
• No withdrawals will be processed until age is confirmed.
• Any winnings accumulated will be voided in accordance with our Terms & Conditions.
• Deposited real-money funds will be returned to the original payment method upon completion of the review.
• Any personal data collected from a confirmed minor will be permanently deleted from xb777 systems within 30 days of the determination.

If you are a parent or guardian and believe a minor has registered on xb777, please contact support@xb777.pro immediately. We will investigate and act promptly. We also recommend using parental control software to restrict minors' access to online gambling platforms.

xb777 operates under an international gaming licence and its server infrastructure may be located outside Pakistan. As a result, your personal data may be transferred to and processed in jurisdictions other than the one in which you reside. xb777 ensures that any such international data transfers are conducted with appropriate safeguards in place, including:

• Contractual clauses with all data processors that mandate data protection standards equivalent to those applied on xb777's home platform.
• Technical controls ensuring that data transferred internationally remains encrypted in transit and at rest, using the same standards described in Section 10.
• Limitation of international transfer scope to only what is operationally necessary — for example, using a KYC verification service hosted in a different jurisdiction requires only the minimum identity data needed to complete the verification.

By using xb777, you acknowledge and consent to the transfer of your personal data to xb777's international infrastructure as described in this section. If you have concerns about international data transfers, please contact support@xb777.pro.

xb777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory guidance. The updated policy will always be published at xb777.pro/privacy-policy with a revised effective date clearly displayed at the top of the document.

For material changes — particularly those that expand the categories of data collected, introduce new sharing arrangements, or reduce player rights — xb777 will provide at least 14 days' advance notice via the platform and by email to your registered address.

Continued use of the xb777 platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a material change, you should close your account and withdraw any remaining real-money balance before the effective date of the change.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how xb777 handles your personal data, please use the following contact channel:

• Data Enquiries Email: support@xb777.pro — include "Privacy Request" or "Data Rights Request" in the subject line.
• Live Chat: Available 24/7 on the xb777 platform. English and Urdu-speaking support agents are available at all times to assist Pakistani players.
• Response Timeframe: x b777 aims to respond to all data rights requests within 30 calendar days of receipt. Complex requests may take up to 60 days, in which case we will notify you of the extension and reason within the initial 30-day window.

If you are not satisfied with xb777's response to your data complaint, you have the right to escalate your concern to our international gaming licence authority's player protection division. Details of the relevant regulatory body are available on request by emailing support@xb777.pro.