Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how xa777, operating at xa777.cam ("Platform", "we", "us", "our"), collects, processes, stores, shares and protects personal data belonging to users ("you", "your", "User", "Player") of the Platform.

xa777 is committed to handling your personal data with care, transparency and in accordance with applicable data protection principles. By registering an account, making a deposit, placing a bet or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the xa777 Terms & Conditions, which govern your use of the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify you as a natural person, either directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, alteration or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, xa777.
• "Data Processor" means any third party that processes Personal Data on behalf of xa777 under a contractual arrangement.
• "Consent" means freely given, specific, informed and unambiguous agreement to the processing of your Personal Data for a stated purpose.
• "KYC Data" means identity and age verification documents including CNIC, passport, proof of address and selfie/liveness check materials submitted during the verification process.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics and functionality.
• "Sensitive Personal Data" means data revealing identity documentation details, financial account information or other categories of data that warrant enhanced protection.

3. Data We Collect

3.1 Account Registration Data

When you create an Account on xa777, we collect the following categories of personal data:

• Full legal name;
• Date of birth;
• Residential address (including city — for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Email address;
• Mobile telephone number;
• Username and encrypted password.

3.2 KYC Verification Data

To fulfil identity verification, age verification and anti-money laundering (AML) obligations, xa777 may collect:

• Government-issued photo identification — typically a valid CNIC (Computerised National Identity Card) or passport for Pakistani users;
• Proof of residential address (utility bill, bank statement or similar document);
• Selfie or liveness verification photograph.

3.3 Financial Transaction Data

When you make deposits or withdrawal requests, xa777 records transaction amounts, timestamps, payment method references and associated account identifiers. We do not store full payment card numbers or mobile wallet credentials — these are handled by the respective payment service providers.

3.4 Usage and Behavioural Data

xa777 collects data about how you use the Platform, including:

• Pages visited, features accessed and time spent on the Platform;
• Betting and gaming history, including stakes, selections, outcomes and session data;
• Device information (device type, operating system, browser type and version);
• IP address and approximate geolocation (country/city level).

3.5 Communications Data

If you contact xa777 support — whether by email, live chat or other channel — we retain records of that correspondence, including your contact details and the content of the communication, for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

xa777 collects personal data through the following means:

• Directly from you — through account registration forms, KYC submission portals, deposit/withdrawal requests and support communications;
• Automatically — through cookies, web beacons, server logs and similar tracking technologies as you interact with the Platform;
• Third-party sources — from identity verification service providers, fraud prevention databases and, where applicable, publicly available sources used for AML screening purposes.

5. Legal Basis for Processing

xa777 processes your personal data on one or more of the following lawful bases:

6. How We Use Your Personal Data

xa777 uses your personal data for the following purposes:

• Account management: Creating, maintaining and administering your xa777 account;
• Service delivery: Processing deposits, settling bets, managing withdrawal requests and operating the Platform's features;
• Identity and age verification (KYC): Confirming your identity, age and eligibility in compliance with applicable obligations;
• Fraud prevention and security: Detecting, investigating and preventing fraudulent activity, money laundering, account misuse and other prohibited conduct;
• Responsible gambling: Monitoring account activity for signs of problem gambling and providing appropriate tools and interventions;
• Customer support: Responding to queries, complaints and disputes via our support channels;
• Communications: Sending transactional notifications (e.g., deposit confirmations, withdrawal updates, KYC status) and, where you have consented, promotional communications;
• Analytics and improvement: Analysing Platform usage to improve features, performance and user experience;
• Legal and regulatory compliance: Meeting our obligations under applicable laws and responding to lawful requests from authorities.

7. Data Sharing & Third-Party Disclosure

7.1 Categories of Recipients

xa777 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary:

• Identity verification providers: Third-party KYC and AML screening services that assist in verifying your identity and complying with regulatory obligations;
• Payment service providers: Entities that process financial transactions on behalf of the Platform — for example, payment gateways facilitating deposits and withdrawals via payment rails familiar to Pakistani users such as Easypaisa, JazzCash, Raast or conventional bank transfers. These providers operate under their own privacy policies and are not endorsed by xa777;
• Technology and infrastructure providers: Hosting, cloud computing, platform security and analytics vendors who process data on our behalf under contractual data processing agreements;
• Fraud and risk management partners: Services that help xa777 detect and prevent fraudulent or prohibited activity on the Platform;
• Legal and regulatory authorities: Government bodies, law enforcement agencies or regulators where disclosure is required by law, court order or regulatory mandate.

7.2 No Sale of Personal Data

xa777 does not sell, rent or trade your personal data to any third party for commercial marketing or advertising purposes. Any data sharing is conducted solely in service of the purposes identified in this Policy.

8. International Data Transfers

xa777 operates in an international technology environment. Your personal data may be transferred to, stored on, or processed by systems located outside Pakistan. Where such transfers occur, xa777 takes reasonable steps to ensure that an adequate level of data protection applies, commensurate with recognised international standards.

By using the Platform, you acknowledge and consent to the transfer of your personal data to locations outside Pakistan where necessary to deliver the Services.

9. Data Retention

xa777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, AML and accounting obligations. The following general principles apply:

• Active account data is retained for the duration of the account relationship plus any legally required post-closure period;
• KYC and identity documents are retained for the period required by applicable AML and identity verification regulations — typically a minimum of five (5) years following account closure;
• Transaction records are retained for a minimum of five (5) years to comply with AML and financial reporting requirements;
• Support communications are retained for a reasonable period to enable quality assurance, dispute resolution and compliance audit;
• Marketing consent records are retained until consent is withdrawn, plus a reasonable additional period for compliance purposes.

When personal data is no longer required for any of the above purposes, xa777 will securely delete or irreversibly anonymise it.

10. Cookies & Tracking Technologies

10.1 What We Use

xa777 uses the following categories of cookies and similar technologies on the Platform:

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies may impair your ability to use core Platform features, including logging into your account. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your experience.

11. Data Security

xa777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data at rest, including password hashes and identity document references;
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is strictly necessary for their role;
• Two-factor authentication (2FA) availability for user accounts and mandatory for internal administrative access;
• Regular security assessments and monitoring to detect and respond to potential vulnerabilities or breaches.

Despite these measures, no internet-based system is entirely invulnerable. xa777 cannot guarantee absolute security and is not liable for unauthorised access resulting from actions outside its reasonable control. You should maintain strong, unique account credentials and enable 2FA on your account.

12. Your Rights

Subject to applicable law and the specific circumstances of your request, you have the following rights with respect to your personal data held by xa777:

• Right of Access: You may request a copy of the personal data xa777 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your account.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., AML retention requirements).
• Right to Restriction: You may request that xa777 restrict the processing of your personal data in certain circumstances, such as where accuracy is contested or processing is objected to.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. Objection to marketing will be honoured unconditionally.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected]. Include your account username and a brief description of your request. xa777 will respond within a reasonable timeframe, subject to identity verification requirements.

13. Minors & Age Protection

The xa777 Platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the applicable operator or license jurisdiction. xa777 does not knowingly collect personal data from minors under the age of 18.

If xa777 becomes aware that personal data has been submitted by a person under the minimum age, all associated data will be deleted promptly and the account suspended. Parents and guardians who believe a minor may have accessed the Platform are encouraged to contact support immediately.

Age verification is conducted as part of the KYC process. xa777 takes this obligation seriously and will not process withdrawal requests or grant full account access until age verification has been satisfactorily completed.

14. Pakistan-Specific Context

xa777 acknowledges the specific legal and regulatory environment in Pakistan. The processing of personal data related to Pakistani users is conducted with awareness of the following considerations:

• Pakistan's data protection framework is developing. xa777 endeavours to apply internationally recognised data protection principles — including purpose limitation, data minimisation and security — regardless of whether a binding domestic law formally requires them.
• xa777 does not share Pakistani users' personal data with the Pakistani government, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any other Pakistani authority unless compelled to do so by a valid legal obligation or lawful order.
• Payment data related to familiar Pakistani payment rails — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — is handled only insofar as is necessary to process transactions. xa777 makes no claim that any of these providers endorse xa777 or support online gambling.
• xa777 does not represent that this Policy complies with any specific provision of Pakistani law. Users are responsible for understanding their own obligations under Pakistani law regarding online gambling and data handling.

15. Policy Amendments

xa777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. When material changes are made, the "Last Updated" date at the top of this page will be revised. Where reasonably practicable, registered users will be notified of significant changes via email or in-platform notification.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes to this Policy, you should stop using the Platform and request account closure.

16. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please contact the xa777 data team via:

Where your request involves the exercise of data subject rights (access, erasure, portability etc.), xa777 will confirm receipt of your request and provide a substantive response within a reasonable timeframe. Identity verification may be required before certain requests can be fulfilled.