Privacy Policy – xc777 Casino

xc777 is committed to protecting the privacy and personal data of its registered players. This Policy applies to all personal data collected, processed, and stored by xc777 in connection with the operation of the xc777 platform, including the casino games lobby, sportsbook, live dealer tables, payment cashier, customer support, and all associated digital services.

This Policy should be read alongside the xc777 Terms and Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms and Conditions regarding data handling, this Privacy Policy shall prevail in respect of personal data matters.

xc777 primarily serves English-speaking Pakistani players based in cities including Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad. Data handling practices described in this Policy are designed to reflect the practical data needs of operating a PKR-denominated online casino platform in the Pakistani market.

For the purposes of this Policy, xc777 Casino (operating at xc777.club) is the data controller in respect of personal data collected from registered Players. As data controller, xc777 determines the purposes for which and the means by which personal data is processed.

Where xc777 engages third-party service providers (such as payment processors, KYC verification providers, or game studios) who process personal data on xc777's behalf, those providers act as data processors and are required by contract to process data only in accordance with xc777's instructions and applicable data protection standards.

xc777 collects personal data in the following categories:

xc777 does not collect special category data (such as health data, religious affiliation, or biometric data) except where specifically required by applicable KYC regulations and with your explicit consent.

xc777 uses the personal data collected for the following purposes:

• Account Registration and Management: To create, maintain, and manage your xc777 Account, verify your identity, and process login and session management.
• Transaction Processing: To process deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT, and to process withdrawal requests in PKR to verified Pakistani accounts.
• KYC & Age Verification: To verify that you meet the 18+ age requirement and to satisfy applicable Know Your Customer obligations.
• Fraud Prevention & Security: To detect, prevent, and investigate fraud, money laundering, and other illegal activity on the xc777 platform.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools including deposit limits, self-exclusion, and cool-off periods applied to your Account.
• Customer Support: To respond to your queries, resolve account issues, and maintain records of support interactions.
• Platform Improvement: To analyse aggregate usage data (in anonymised or pseudonymised form) to improve the xc777 platform, game selection, and user experience for Pakistani players.
• Legal Compliance: To comply with applicable legal obligations, regulatory requirements, and court orders.
• Communications: To send you transactional communications (e.g., deposit confirmations, withdrawal notifications) and, where you have consented, promotional communications about xc777 offers.

xc777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and xc777 (the Terms and Conditions), including account operation, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, anti-money laundering (AML), and age verification requirements.
• Legitimate Interests: Processing for xc777's legitimate business interests, including fraud prevention, platform security, and platform improvement, where those interests are not overridden by your rights and interests.
• Consent: Where xc777 relies on your consent to process data — for example, for marketing communications — you may withdraw that consent at any time by contacting xc777 support or using the unsubscribe mechanism in any marketing communication.

xc777 does not sell your personal data. xc777 may share your personal data with third parties only in the following circumstances:

• Payment Processors: JazzCash, Easypaisa, and banking partners (HBL, UBL, Meezan Bank, Bank Alfalah) receive the minimum data necessary to process your transaction. Payment processors are required to handle this data in accordance with their own privacy policies and applicable regulations.
• KYC/Identity Verification Providers: Third-party identity verification services that process identity documents and verify age on behalf of xc777. These providers act as data processors under contractual data processing agreements.
• Game Providers: Licensed game studios whose games are hosted within the xc777 platform may receive anonymised or pseudonymised player session data necessary for game operation and responsible gaming monitoring.
• IT & Infrastructure Providers: Cloud hosting, database, and security service providers that provide the technical infrastructure on which xc777 operates, subject to data processing agreements.
• Regulatory Authorities: xc777 may be required to disclose personal data to licensing authorities, regulatory bodies, or law enforcement agencies where required by law.
• Legal Proceedings: In connection with any actual or prospective legal proceedings, xc777 may disclose personal data where necessary to establish, exercise, or defend legal claims.

xc777 places particular importance on the security of payment data given the financial nature of the platform. The following specific practices apply to payment data:

• Full JazzCash and Easypaisa wallet credentials are not stored by xc777. Transaction references and confirmation data are retained for accounting and fraud prevention purposes.
• Bank account details (such as IBAN) provided for withdrawal processing are stored in encrypted form and accessed only by authorised xc777 financial operations personnel.
• USDT wallet addresses provided for cryptocurrency transactions are retained for transaction reconciliation and AML compliance purposes.
• All payment data is handled by PCI-DSS compliant payment processors where card data is involved.

Your full PKR transaction history with xc777 — deposits and withdrawals — is accessible from within your Account for the duration of your Account's active status and for a period following Account closure as required by applicable retention obligations.

xc777 uses cookies and similar tracking technologies on the xc777 platform for the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Remember your preferences — such as your preferred language, game display settings, or remembered device status — to provide a more personalised experience on xc777.
• Analytics Cookies: Collect anonymised data about how players use the xc777 platform — which pages are visited, how long sessions last, and which games are most popular. This data is used in aggregate form to improve the Platform. xc777 does not use this data to identify individual players.

Most browsers allow you to control cookies through their settings. Disabling non-essential cookies will not prevent you from accessing xc777, but may affect certain functional features of the Platform.

xc777 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your active xc777 Account plus any legally required post-closure retention period.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with applicable AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following Account closure or the date of the KYC submission, whichever is later, in accordance with applicable regulatory requirements.
• Support Communications: Retained for three (3) years following the date of the communication, unless retention for a longer period is required in connection with a legal claim.
• Self-Exclusion Records: Records of self-exclusion and the grounds for Account closure are retained for a minimum of five (5) years to prevent re-registration during the exclusion period and to comply with responsible gaming obligations.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised.

xc777 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include:

• SSL/TLS encryption for all data transmitted between players' devices and xc777 servers.
• Encrypted storage of sensitive personal data and financial information at rest.
• Access controls ensuring that personal data is accessible only to authorised xc777 personnel with a legitimate business need.
• Regular security assessments and penetration testing of the xc777 platform.
• Two-factor authentication (SMS OTP) for player logins from unrecognised devices.
• Procedures for detecting, reporting, and investigating personal data breaches.

While xc777 takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, xc777 will notify affected players without undue delay.

As a registered xc777 player, you have the following rights in relation to the personal data xc777 holds about you:

• Right of Access: You may request a copy of the personal data xc777 holds about you. xc777 will respond to a verified access request within a reasonable timeframe.
• Right to Rectification: You may request correction of personal data that is inaccurate or incomplete. Some data (such as your registered mobile number) can be updated directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where xc777 no longer has a legal basis to retain it. This right does not apply to data that xc777 is required to retain by applicable legal or regulatory obligations.
• Right to Restrict Processing: You may request that xc777 temporarily restrict processing of your personal data in certain circumstances.
• Right to Object: You may object to processing of your personal data based on xc777's legitimate interests, including in relation to direct marketing.
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to xc777 where processing is based on consent or contract.

To exercise any of these rights, please contact xc777 support. Requests will be handled promptly and in accordance with applicable data protection standards. xc777 may need to verify your identity before acting on a data rights request.

xc777 is strictly intended for users aged 18 and above. xc777 does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the xc777 registration and KYC process. If xc777 becomes aware that personal data has been collected from a person under the age of 18, xc777 will take immediate steps to delete that data and close the associated Account.

If you believe that a minor has registered an Account on xc777, please contact xc777 support immediately so that the matter can be investigated and the Account closed without delay.

xc777 may transfer personal data to, or process personal data in, countries outside Pakistan in connection with third-party service providers (such as cloud hosting providers or game studios). Where such transfers occur, xc777 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with the protections described in this Policy.

Appropriate safeguards may include contractual data processing agreements with the receiving party, or reliance on the receiving party's own applicable data protection certification.

xc777 reserves the right to amend this Privacy Policy at any time. Where a material change is made, xc777 will notify registered Players by email or by displaying a prominent notice on the Platform prior to the change taking effect, where practicable.

The most current version of this Policy is always available at xc777.club/privacy-policy. The effective date at the top of this page indicates the date of the most recent revision. Continued use of the xc777 platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

For any questions, concerns, or data rights requests relating to this Privacy Policy or xc777's handling of your personal data, please contact the xc777 data team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available within your xc777 Account when logged in — the fastest route for urgent queries.
• Subject Line: Please include "Privacy Request – [your registered mobile number]" in the subject of any email privacy query to ensure it is directed to the correct team promptly.

xc777 will acknowledge receipt of data rights requests within five (5) business days and will respond substantively within thirty (30) days, unless an extension is required due to the complexity or volume of the request, in which case xc777 will inform you of the extension and the reasons for it.