xs777 Privacy Policy

01 Introduction & Scope

xs777 ("xs777", "we", "us", "our") is committed to protecting the privacy and personal data of all users who access xs777.bio (the "Platform"). This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we use it, with whom we share it, how long we retain it, and the rights available to you in relation to your data.

This Policy applies to all users of the xs777 Platform, including registered account holders, visitors who browse xs777.bio without registering, and individuals who communicate with xs777 via live chat, email, or other channels. It applies regardless of the device or location from which you access the Platform, including users accessing xs777 from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities across Pakistan.

By using the xs777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform.

This Policy should be read alongside the xs777 Terms & Conditions, which govern the overall use of the Platform.

02 Personal Data We Collect

xs777 collects personal data in several ways — directly from you when you register or interact with the Platform, automatically through technical systems, and in some cases from third-party verification partners. The categories of data we collect include:

xs777 does not collect sensitive personal data such as religious beliefs, political opinions, or health information, except where required for responsible gaming assessments (e.g., self-exclusion records).

03 How xs777 Uses Your Personal Data

xs777 uses the personal data it collects for the following purposes, each of which is necessary for the operation of the Platform or is required by applicable regulatory obligations:

• Account Management: To create, maintain, and manage your xs777 account, including processing your registration, verifying your identity and age (18+), and enabling xs777 login functionality.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other approved payment methods. Financial data is handled in accordance with applicable payment security standards.
• Service Provision: To provide access to xs777's sports betting markets (including cricket, PSL, international T20s), live casino tables, slot games, and other platform features.
• Regulatory Compliance: To meet xs777's obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gaming obligations — including age verification and self-exclusion management.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, cheating, and other prohibited conduct on the xs777 Platform.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling, enforce self-exclusion requests, apply deposit limits and cooling-off periods, and provide responsible gaming interventions where appropriate.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the xs777 Platform's performance, content, and user experience.
• Marketing Communications: To send promotional offers, bonus notifications, and xs777 product updates — subject to your marketing preferences and opt-out rights (see Section 11).

04 Legal Basis for Processing

xs777 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and xs777 (i.e., the xs777 Terms & Conditions) — including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with xs777's legal and regulatory obligations, including AML/KYC requirements and responsible gaming mandates.
• Legitimate Interests: Processing is carried out for xs777's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests do not override your fundamental rights and freedoms.
• Consent: For direct marketing communications, xs777 relies on your consent. You may withdraw this consent at any time by updating your communication preferences in your xs777 account settings or by contacting xs777 support.

05 Data Sharing & Third Parties

xs777 may share your personal data with the following categories of recipients:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other approved payment service providers, for the purpose of processing your PKR deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and age verification service providers who assist xs777 in verifying user identities and complying with regulatory requirements.
• Game Software Providers: Licensed casino game providers (including those supplying xs777 slots and live dealer content) who may process technical session data as part of game delivery.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or regulatory request, xs777 may disclose personal data to competent authorities, including for AML reporting purposes.
• Technology & Infrastructure Providers: Cloud hosting, security, analytics, and customer support technology vendors who process data on xs777's behalf under appropriate data processing agreements.

All third parties with whom xs777 shares data are contractually required to handle that data in accordance with applicable data protection standards and to use it only for the specified purpose.

06 Cookies & Tracking Technologies

xs777.bio uses cookies and similar tracking technologies to operate the Platform, remember your session, and improve your experience. The categories of cookies used on xs777 include:

• Strictly Necessary Cookies: Required for core xs777 functionality — including maintaining your logged-in session, processing bets, and ensuring Platform security. These cannot be disabled.
• Functional Cookies: Remember your preferences, language settings, and personalisation choices across xs777 sessions.
• Performance / Analytics Cookies: Collect aggregated, anonymised data about how users navigate xs777 — including which pages are visited most and where users encounter technical issues. This data is used to improve the Platform.
• Marketing Cookies: Used to deliver relevant xs777 promotional content. You may opt out of marketing cookies through your browser settings or by contacting xs777 support.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use certain xs777 features, including the xs777 login function.

07 Data Retention

xs777 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods driven by regulatory requirements:

Following the expiry of applicable retention periods, xs777 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

08 Data Security

xs777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and xs777's servers is encrypted using 256-bit SSL/TLS — the same standard used by major banking institutions.
• Encryption at Rest: Sensitive personal data, including financial records and identity documents, is encrypted in xs777's data stores.
• Access Controls: Access to personal data within xs777's systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Password Security: xs777 stores account passwords using industry-standard hashing algorithms. Passwords are never stored or transmitted in plain text.
• Two-Factor Authentication: xs777 supports SMS OTP two-factor authentication (2FA) for all accounts — strongly recommended for all Pakistani users to protect their xs777 account and PKR balance.
• Security Monitoring: xs777's infrastructure is subject to continuous security monitoring and regular vulnerability assessments.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights and freedoms, xs777 will notify affected users as promptly as practicable.

09 Your Data Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by xs777:

• Right of Access: You may request a copy of the personal data xs777 holds about you (a Subject Access Request).
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your xs777 account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that xs777 may be required to retain certain data for regulatory compliance purposes even following an erasure request.
• Right to Restriction: You may request that xs777 restricts the processing of your data in certain circumstances (e.g., while a dispute is being investigated).
• Right to Data Portability: You may request that xs777 provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to xs777's processing of your data for direct marketing purposes at any time, and in certain other circumstances.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact xs777 support via live chat at xs777.bio or by email at [email protected]. xs777 will respond to valid data rights requests within 30 days.

10 Children's Privacy

xs777 implements age verification procedures at registration and may require documentary evidence of age at any time. If you believe a minor has accessed or registered on xs777, please contact xs777 support immediately at [email protected].

11 Marketing Communications

xs777 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, cricket betting promotions, PSL season offers, new games, and other xs777 news — subject to your communication preferences.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your xs777 account settings;
• Clicking the unsubscribe link in any xs777 marketing email;
• Contacting xs777 support via live chat or email and requesting removal from marketing lists.

Opting out of marketing communications does not affect xs777's ability to send you transactional and service communications — such as deposit confirmations, withdrawal notifications, account security alerts, and important policy updates — which xs777 may send regardless of marketing preferences.

xs777 does not engage in unsolicited bulk messaging or spam. xs777 does not share your contact details with third-party marketers.

12 Changes to This Privacy Policy

xs777 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform features, or data processing practices. When material changes are made, xs777 will notify registered users via email or an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the xs777 Platform following notification of a Policy update constitutes acceptance of the revised Policy. We encourage you to review this page periodically.

13 Contact & Data Enquiries

For questions, concerns, or requests relating to this Privacy Policy or xs777's handling of your personal data, please contact the xs777 Data Team: