x777 Privacy Policy – How We Collect, Use and Protect Your Data

1Who We Are — The x777 Data Controller

x777 ("x777", "we", "us", "our") operates the online gaming and entertainment platform accessible at x777-bangla.com. For the purposes of data protection, x777 is the data controller — meaning we determine the purposes for which and the manner in which your personal data is processed.

This Privacy Policy applies to all personal data collected in connection with your use of the x777 platform, including the website, mobile browser experience, customer support communications, and any promotional or marketing activity directed at you as an x777 player.

By registering an account at x777 and using the platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should not use the x777 platform.

2What Personal Data x777 Collects

x777 collects the following categories of personal data from players, depending on the stage of your interaction with the platform:

Registration Data (collected when you create an x777 account):

• Full legal name as it appears on your CNIC or passport
• Date of birth (to verify you are 18 or older)
• Mobile phone number (used as primary contact and for OTP verification)
• Email address
• Residential address
• Username and hashed (encrypted) password

KYC Verification Data (collected when identity verification is required):

• Scanned or photographed copy of your CNIC, Passport or Driving Licence
• Proof of address document (utility bill, bank statement or government letter)
• Proof of payment method ownership (Easypaisa, JazzCash, NayaPay or SadaPay confirmation)

Financial Data (collected during deposits and withdrawals):

• Deposit amounts and timestamps
• Withdrawal requests, amounts and processing status
• Tokenised payment method identifiers (mobile wallet numbers, last 4 digits of cards) — x777 never stores raw card numbers or wallet PINs

Gaming Activity Data (generated automatically during platform use):

• Games played, bet amounts placed, game results and win/loss records
• Session start and end times and durations
• Bonus usage history and wagering progress
• Game preferences and browsing behaviour within the x777 platform

Technical Data (collected automatically by our platform systems):

• IP address and approximate geolocation derived from IP
• Device type, model, operating system and browser version
• Platform access logs (login times, page visits, session lengths)
• Referrer URL (how you arrived at the x777 platform)

3How x777 Collects Your Data

x777 collects personal data through the following means:

• Directly from you: Registration forms, KYC document submissions, customer support conversations, live chat messages, and any information you voluntarily provide when contacting x777.
• Automatically during platform use: Technical and session data is collected automatically via our platform infrastructure, server logs and analytics systems whenever you visit or interact with the x777 website or live gaming platform.
• Via cookies and similar technologies: x777 uses cookies, web beacons and local storage to collect browsing and session data. See Section 7 for full cookie details and how to manage your preferences.
• From third-party service providers: x777 may receive supplementary identity or fraud-detection data from our KYC verification partners and payment processors where required to complete a verification or transaction.

4Why x777 Uses Your Personal Data

x777 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your separate consent:

• Account creation and management: To register your x777 account, verify your identity, manage your login credentials and maintain your account record.
• Age and eligibility verification: To confirm you are 18 or older and meet the eligibility requirements in our Terms and Conditions before allowing access to real-money gaming.
• Payment processing: To facilitate PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, Bank IBFT and card payment providers. Transaction records are retained for financial audit purposes.
• KYC and anti-money laundering (AML) compliance: To verify your identity and the legitimacy of funds in accordance with our licensing obligations and applicable AML regulations.
• Game delivery and platform operation: To provide the games, calculate and settle bets, apply and track bonus wagering, and maintain the technical functioning of the x777 platform.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and other prohibited activities described in our Terms and Conditions.
• Responsible gaming monitoring: To track gaming behaviour patterns, enforce player-set limits, identify potential problem gambling indicators and take appropriate protective action.
• Customer support: To respond to your queries, resolve disputes and maintain a record of support interactions for quality and audit purposes.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the x777 platform, game selection, interface and performance.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates, subject to your marketing preferences. See Section 12 for opt-out details.

5Legal Basis for Processing

x777 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are:

• Contract performance: Processing your registration data, payment data and gaming activity data is necessary to perform our contract with you — i.e., to operate your x777 account and provide the services you've signed up for.
• Legal obligation: KYC identity verification, AML checks and record-keeping for financial transactions are required by our gaming licence and applicable law. x777 has no discretion to avoid this processing.
• Legitimate interests: Fraud detection, security monitoring, platform improvement and business analytics are conducted on the basis of x777's legitimate interest in operating a secure, fair and functional gaming platform — balanced against your rights and reasonable expectations.
• Consent: Marketing communications via email and SMS are sent on the basis of your explicit consent at registration or at a later point. You may withdraw consent at any time without affecting x777's right to process data under the other bases above.

6Sharing Your Personal Data

x777 does not sell your personal data. We share data only where necessary with the following categories of trusted third-party service providers, all of whom are contractually bound to use your data solely for the services they provide to x777:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and Visa/Mastercard payment gateways receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification partners: Accredited identity verification service providers receive your identity documents and biometric data (where applicable) solely for the purpose of completing your x777 account verification.
• Cloud infrastructure and hosting providers: x777 operates on enterprise cloud infrastructure. Our hosting providers store and process data on our behalf under strict data processing agreements.
• Analytics and platform performance providers: Anonymised and aggregated data — with no personally identifying information — may be shared with platform analytics tools to help x777 improve the gaming experience.
• Regulatory and law enforcement authorities: x777 may disclose your personal data to relevant authorities where required by law, court order, regulatory demand or to prevent serious harm. We will notify you of such disclosure where legally permitted to do so.

x777 does not transfer your personal data to parties outside these categories without your explicit consent. All third-party service providers used by x777 are assessed for data security standards before engagement.

7Cookies & Tracking Technologies

x777 uses cookies and similar tracking technologies on the platform to deliver a functional and personalised experience. Cookies are small text files placed on your device when you visit the x777 website. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core x777 functionality.
• Functional cookies: Remember your preferences — such as language settings and preferred game view — so you don't have to reset them every time you log in to x777.
• Analytics cookies: Track aggregate usage patterns across the x777 platform (pages visited, time spent, features used). This data is anonymised and used only to improve platform performance.
• Marketing cookies: Used to identify you across browsing sessions and serve relevant x777 promotional content. These are only active if you have consented to marketing communications.

x777 does not use third-party advertising networks that track your activity across other websites outside the x777 platform domain.

8How Long x777 Keeps Your Data

x777 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period, x777 will securely delete or anonymise your personal data so it can no longer be linked back to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical analysis.

Data retention visual overview:

9How x777 Protects Your Data

x777 takes the security of your personal and financial data seriously and implements layered technical and organisational measures to protect it:

• Encryption in transit: All data transmitted between your device and the x777 platform is encrypted using TLS 1.3 or higher. The x777 website is HTTPS-only — never HTTP.
• Encryption at rest: Stored personal and financial data is encrypted using AES-256. Backup data is encrypted with the same standard.
• Payment tokenisation: x777 never stores raw payment credentials. All payment method data is tokenised by our PCI-DSS compliant payment processor partners.
• Access controls: Access to personal data within x777 is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational reason can access player data, and all access is logged.
• Two-factor authentication: x777 offers 2FA for all player accounts and enforces it internally for all staff with access to player data systems.
• Regular security audits: The x777 platform undergoes periodic penetration testing and security audits by independent security consultants.
• Incident response: x777 maintains a documented data breach response procedure. In the event of a breach that affects your personal data, we will notify affected players and relevant authorities in accordance with applicable legal obligations.

10Your Data Rights as an x777 Player

As a player on the x777 platform, you have the following rights over your personal data. These rights apply regardless of whether your account is currently active, suspended or closed:

• Right of Access: You may request a copy of all personal data x777 holds about you. We will provide this in a readable format within 30 days of a verified request.
• Right to Rectification: If any personal data x777 holds about you is inaccurate or incomplete, you have the right to request its correction. Contact support with the correction and any supporting evidence.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where x777 no longer has a legal or contractual basis to retain it. Note that some data (financial records, KYC documents) must be retained for legally mandated periods and cannot be deleted on request during that period.
• Right to Restriction: You may request that x777 restrict processing of your data in certain circumstances — for example, while a correction request is being verified.
• Right to Data Portability: You may request a machine-readable export of the personal data you provided to x777 (account data, transaction history, gaming history) to transfer to another service if you wish.
• Right to Object: You may object to x777 processing your data on the basis of legitimate interests — including profiling for marketing personalisation. We will assess your objection and cease processing unless compelling legitimate grounds exist.
• Right to Withdraw Consent: Where processing is based on your consent (marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact x777 at support@x777-bangla.com with the subject line "Data Rights Request" and include your registered x777 account mobile number to enable us to verify your identity. We will acknowledge your request within 48 hours and respond substantively within 30 days.

11Children's Privacy

The x777 platform is strictly for adults aged 18 and over. x777 does not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has created an x777 account or submitted personal data, we will immediately close the account, delete the data and, if the minor has made deposits, take appropriate steps to return funds to the legitimate account holder.

If you are a parent or guardian and believe your child may have accessed or registered at x777, please contact support@x777-bangla.com immediately with relevant details. We take these reports very seriously and will act promptly.

x777 uses age verification at the point of registration — including date of birth confirmation and KYC identity verification — specifically to prevent access by minors. See our Responsible Gaming page for additional safeguarding information.

12Marketing Communications

x777 may send you promotional communications about bonuses, new games, special events and platform updates. We do this only where we have your consent or a legitimate interest basis, as follows:

• Email marketing: Sent with your consent, given at registration. Every x777 marketing email contains a clearly visible unsubscribe link that removes you from the email list immediately and permanently.
• SMS notifications: Sent with your consent to your registered mobile number. You can opt out by replying STOP to any x777 SMS or by updating your preferences in your account settings.
• On-platform notifications: Pop-up and banner notifications within the x777 logged-in experience are part of the core service and cannot be disabled entirely, but can be reduced through your account notification preferences.

Opting out of marketing communications has no effect on your ability to use the x777 platform, access games or withdraw funds. Opting out does not unsubscribe you from transactional communications (deposit confirmations, withdrawal notifications, security alerts, support replies) which are part of the service contract.

x777 does not use your personal data for third-party marketing or share your contact details with external advertisers.

13Updates to This Privacy Policy

x777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When we make material changes — changes that affect your rights or how we use your data in a significant way — we will:

• Update the "Last Updated" date at the top of this page.
• Display a notification on the x777 platform homepage for not less than 14 days before the updated policy takes effect.
• Where the change materially affects your rights, send a notification to your registered email address summarising the change.

Your continued use of the x777 platform after a Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with a material change, you should contact support to close your account before the change takes effect. Any real money balance will be returned to you via your registered payment method.

We recommend reviewing this Privacy Policy periodically. This page always contains the current version.

14Contact x777 About Privacy

If you have any questions about this Privacy Policy, wish to exercise a data right, want to report a potential privacy concern or believe your data has been mishandled by x777, please contact us through the following channels:

• Email (preferred for privacy matters): support@x777-bangla.com — subject line: "Privacy Query" or "Data Rights Request"
• Live chat: Available 24/7 on the x777 platform after logging in. For data rights requests, email is preferred as it creates a documented record.
• Response time: We acknowledge privacy-related emails within 48 hours and provide a substantive response within 30 days, as required by data protection principles.