Privacy Policy — x777sx

1. Introduction

x777sx is committed to protecting the privacy and personal data of all users who access the Platform. This Policy sets out in clear, structured terms what personal data we collect, the purposes for which it is processed, how long we retain it, with whom it may be shared and what rights you hold as a data subject.

This Policy applies to all users of the x777sx website, mobile platform and associated services, regardless of their geographic location. It applies with particular relevance to Pakistani users located in cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, who constitute a significant portion of our user base.

x777sx processes personal data in accordance with the data protection requirements of the jurisdiction in which it holds its operating license. We acknowledge that Pakistan's data protection landscape is evolving and that the Personal Data Protection Bill (PDPB) and related regulatory developments are relevant considerations for Pakistani users. We do not claim that our processing practices are formally regulated by any Pakistani authority. This Policy reflects our internal standards and commitments.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, email address, date of birth, IP address, payment details and account activity records.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure and destruction.
• "Data Controller" means x777sx, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third-party entity that processes personal data on behalf of x777sx under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process applied to all registered users.
• "Cookies" means small text files placed on your device by the Platform to support functionality, analytics and session management.
• "Legitimate Interests" means processing that is necessary for purposes that are not overridden by your data protection rights, used as a lawful basis only where appropriate balancing tests have been applied.
• "Sensitive Data" means special categories of personal data including health information, biometric data and financial information that attract heightened protection obligations.

3. Data Controller

x777sx is the Data Controller in respect of personal data collected through the Platform. As Data Controller, we are responsible for determining the purposes and means of processing and for ensuring that processing is carried out lawfully, fairly and transparently.

Where x777sx engages third-party service providers to process personal data on its behalf — including KYC verification providers, payment processors and fraud-detection services — those entities act as Data Processors. They are contractually bound to process data only on x777sx's documented instructions and to maintain appropriate security measures.

Queries related to data processing, rights requests and privacy complaints may be directed to our support team using the contact details in Section 13.

4. Data We Collect

4.1 Registration & Account Data

When you create an x777sx account, we collect:

• Full legal name
• Date of birth
• Email address
• Residential address (including city and country — e.g., Karachi, Lahore, Islamabad)
• Username and password (password stored in hashed form only)
• Phone number (where provided)

4.2 KYC & Verification Documents

To comply with age verification and AML obligations, we may collect copies of:

• Government-issued photo identification (National Identity Card, passport or equivalent)
• Proof of address (utility bill, bank statement or equivalent dated within three months)
• Proof of payment method ownership

4.3 Financial & Transaction Data

We collect records of deposits, withdrawals, bets placed, winnings credited and bonus activity. Payment method details (such as masked card numbers, Easypaisa wallet references or JazzCash account identifiers) are recorded for transaction tracing and fraud prevention. Full payment credentials are never stored on our servers — they are processed by certified payment gateways.

4.4 Technical & Device Data

We automatically collect:

• IP address and approximate geolocation
• Device type, operating system and browser information
• Session timestamps, login events and navigation paths
• Platform feature usage and betting activity patterns

4.5 Communication Data

When you contact our support team — whether via live chat, email or any other channel — we retain records of your communications. This includes support ticket content, resolution outcomes and any attachments submitted.

5. How We Collect Data

Personal data is collected through the following means:

• Direct submission: Information you provide when registering, completing KYC, making a deposit, contacting support or responding to a survey.
• Automated collection: Technical data gathered automatically when you access the Platform, including cookies, server logs and analytics tools.
• Third-party sources: Where permitted, we may receive data from KYC verification agencies, fraud-prevention databases and payment processors to supplement your submitted information or verify its accuracy.
• Account activity: Betting history, game activity, promotion usage and loyalty program participation data generated through your use of the Platform.

6. Purposes of Processing & Legal Basis

x777sx processes personal data for the following purposes, each supported by an identified legal basis:

Where we rely on legitimate interests as our legal basis, we apply a balancing test to ensure that our interests are not overridden by your privacy rights. You may request details of any such assessment by contacting us as described in Section 13.

7. Data Sharing & Third-Party Disclosure

7.1 We Do Not Sell Your Data

x777sx does not sell, rent or trade personal data to third parties for commercial marketing purposes. Any reference to familiar Pakistani payment providers — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — on this Platform is for informational context only. These providers do not receive your personal data from x777sx unless you initiate a transaction through them directly.

7.2 Service Providers

We may share personal data with the following categories of third-party service provider, bound by data processing agreements:

• KYC and identity verification providers: To verify your identity, age and document authenticity.
• Payment processors and gateways: To facilitate deposits and withdrawals securely.
• Fraud detection and risk management services: To identify and prevent fraudulent account activity.
• Cloud hosting and infrastructure providers: To store and process data on secure servers.
• Customer support platforms: To manage live chat, ticketing and email communications.
• Analytics providers: To process anonymised or pseudonymised usage data for Platform improvement.

7.3 Regulatory and Legal Disclosure

x777sx may be required to disclose personal data to regulatory authorities, law enforcement agencies or courts in response to a legally binding request, court order or regulatory investigation. We will inform affected users of such requests where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets involving x777sx, personal data may be transferred to the acquiring entity as part of that transaction. We will notify users before their data is transferred and becomes subject to a different privacy policy.

8. Data Retention

x777sx retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory and contractual obligations. The following general retention principles apply:

• Account data: Retained for the duration of the active account relationship plus a minimum of five years following account closure, to meet AML record-keeping obligations.
• KYC documents: Retained for a minimum of five years following the end of the customer relationship, in compliance with anti-money laundering regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for three years from the date of the communication, unless relevant to an ongoing dispute or investigation.
• Technical and device logs: Typically retained for 12 months, except where required for fraud investigation or legal proceedings.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period to evidence the original consent decision.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Your Rights as a Data Subject

Subject to applicable data protection law and any overriding legal obligations on x777sx, you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact our support team as described in Section 13. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notice provided.

Please note: certain rights may be subject to limitations where x777sx is required by law to retain or process the data in question — for example, KYC records subject to AML retention obligations cannot be deleted upon request.

10. Cookies & Tracking Technologies

10.1 What We Use

x777sx uses the following categories of cookies and similar technologies:

• Essential cookies: Required for the Platform to function — including session management, login authentication and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings and display options — to improve your experience.
• Analytical cookies: Used to understand how users interact with the Platform, including which pages are visited most, where users enter and exit, and how features are used. Data collected is aggregated and pseudonymised where possible.
• Marketing cookies: Only placed with your explicit consent. If applied, they track interactions with promotional content to measure campaign effectiveness.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform performance or restrict access to some features. Specific cookie management instructions are available in your browser's help documentation.

10.3 Third-Party Tracking

We do not permit third-party advertising networks to place tracking cookies on the Platform without prior disclosure. Any analytics or tracking tools in use are subject to data processing agreements that restrict their use of your data to the purposes specified in this Policy.

11. Security Measures

x777sx implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. Key measures include:

• Encryption in transit: All data transmitted between your device and x777sx servers is encrypted using HTTPS/TLS protocols.
• Encryption at rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis. Role-based access controls are enforced across all internal systems.
• Two-factor authentication: Available for all user accounts and enforced for all administrative access to internal systems.
• Security reviews: Regular vulnerability assessments and infrastructure reviews are conducted to identify and remediate security risks.
• Incident response: A documented data breach response procedure is in place. In the event of a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by applicable law.

No security system is infallible. While we implement robust controls, we cannot guarantee absolute security. We encourage users to maintain strong account passwords, enable 2FA and promptly report any suspected unauthorised access to our support team.

12. Children & Minors

x777sx is strictly an adults-only platform. We do not knowingly collect personal data from individuals below the age of 18 — or the higher minimum age required by the operator/license jurisdiction. KYC age verification is applied at account registration to enforce this restriction.

If we become aware that personal data has been collected from a minor, we will immediately suspend the relevant account, delete the associated data and, where appropriate, notify the relevant authorities. If you are a parent or guardian and believe a minor has registered on x777sx, please contact us immediately using the details in Section 13.

13. Contact Us & Complaints

For any queries regarding this Privacy Policy, to exercise your data subject rights, or to submit a privacy-related complaint, please contact x777sx through the following channels:

When submitting a data rights request, please include your registered email address, username and a clear description of the request. We may need to verify your identity before processing certain requests.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate the matter to the supervisory authority or data protection regulator in the jurisdiction applicable to your situation. x777sx does not operate under a Pakistan-specific data protection authority registration at this time — we apply the standards of the jurisdiction in which we are licensed.

13.1 Policy Updates

x777sx may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements or Platform features. Where a material update is made, we will publish a notice on the Platform before the change takes effect. The date at the top of this document indicates the most recent revision. Continued use of the Platform after the effective date of an update constitutes acceptance of the revised Policy.