Privacy Policy — XP 777 Pakistan Data Protection & Your Rights

01Who We Are — The Data Controller

XP 777, operating at xp777.best, is the data controller responsible for the personal information you provide when using this platform. As data controller, xp 777 determines the purposes and means by which your personal data is processed. If you have any questions about our data practices or wish to exercise any of your privacy rights, you can contact us at support@xp777.best.

This Privacy Policy applies to all services offered on the xp 777 platform — including sports betting on cricket and PSL fixtures, crash games such as Aviator, the Refer a Friend programme, promotional activities and all account-related services. By registering and using the xp 777 platform, you acknowledge that you have read and understood this Privacy Policy.

02Personal Data We Collect

XP 777 collects personal data in three ways: information you provide directly, information generated automatically through your use of the platform, and information obtained from third parties such as payment processors and identity verification services.

Information You Provide Directly

• Registration data: Full legal name, date of birth, email address, Pakistani mobile number and residential address.
• Identity verification (KYC): CNIC number, CNIC images (front and back) and, where required, a selfie for liveness verification.
• Payment information: Easypaisa or JazzCash mobile wallet number, bank account details for IBFT withdrawals, and Visa/Mastercard details where applicable. Full card numbers are never stored on xp 777 servers — payment processing is handled by certified payment gateways.
• Support communications: Messages, emails and live chat records when you contact xp 777 support.
• Responsible gaming preferences: Deposit limits, self-exclusion elections and other responsible gaming tool settings you configure on your account.

Information Generated Automatically

• IP address and approximate geographic location at the time of login and bet placement.
• Device type, operating system and browser type used to access xp 777.
• Betting history — all bets placed, markets, stakes, odds and settlement results on your xp 777 account.
• Session data — login times, session duration and navigation patterns within the xp 777 platform.
• Cookie and local storage data — explained further in Section 5.

Information from Third Parties

Where xp 777 uses third-party identity verification services to validate CNIC information, those services may return confirmation data to us. Payment processors return transaction status information. Anti-fraud screening services may provide risk scores associated with payment methods. None of these third parties are provided with more of your data than is necessary for their specific function.

03How XP 777 Uses Your Personal Data

XP 777 uses your personal data only for the purposes described in this policy. We do not use data for purposes that are incompatible with why it was originally collected. The primary purposes for which your data is used at xp 777 are:

XP 777 does not use automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for responsible gaming intervention or fraud suspicion, a human reviewer evaluates the case before any restrictive action is taken.

04Legal Basis for Processing

Every instance of data processing at xp 777 has a specific legal basis. The main legal bases on which xp 777 processes personal data are:

• Contract performance: Processing necessary to provide you with the services you have signed up for at xp 777 — running your account, processing bets and handling payments.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering (AML) checks, identity verification and responsible gaming obligations.
• Legitimate interests: Processing necessary for purposes that benefit xp 777 or third parties without unfairly overriding your interests — such as fraud prevention, platform security and anonymised analytics for product improvement.
• Consent: Processing based on your explicit opt-in — primarily for marketing communications. You can withdraw this consent at any time.

05Cookies & Tracking Technologies

XP 777 uses cookies and similar tracking technologies on the xp777.best platform. Cookies are small text files placed on your device that help us provide a better, more personalised experience and enable essential platform functionality.

Types of Cookies Used at XP 777

• Essential cookies: Required for core platform functionality — session management, authentication, bet slip operation and payment processing. These cannot be disabled without breaking the platform.
• Performance cookies: Used to collect anonymised data about how Pakistani players use xp 777 — which pages are visited most, where players spend time and what causes them to leave. This helps us improve the platform.
• Functionality cookies: Remember your preferences — language settings, odds format preference and other personalisation choices you've made on xp 777.
• Security cookies: Help detect and prevent fraudulent activity and protect your xp 777 session from hijacking.

XP 777 does not use third-party advertising cookies or tracking pixels that enable other websites to track your activity after leaving xp777.best. You can manage cookie preferences through your browser settings, though disabling essential cookies will impact your ability to use the platform normally.

06Sharing Your Personal Data

XP 777 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. We share data only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card payment processors receive the minimum data required to execute your deposit or withdrawal. These processors are contractually bound to handle your data securely and only for payment processing purposes.
• Identity verification services: Third-party KYC providers may receive your CNIC details and verification documents to confirm your identity. These providers operate under strict data protection agreements with xp 777.
• Anti-fraud and security partners: Fraud prevention services may receive technical data such as IP addresses and device fingerprints to help identify suspicious activity patterns that may affect your account security.
• Legal authorities: XP 777 will disclose personal data to law enforcement, regulatory bodies or other government authorities where required by applicable law or in response to a valid legal request. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of xp 777's business, your personal data may be transferred as part of that transaction. You will be notified of any change in data controller before such a transfer takes effect.

07Data Security at XP 777

Protecting your personal data against unauthorised access, loss or disclosure is a core operational priority at xp 777. The security measures we have in place include:

• SSL/TLS encryption: All data transmitted between your device and xp777.best is encrypted using industry-standard TLS protocols. This protects your personal details, payment information and account credentials in transit.
• Encrypted data storage: Sensitive personal data — including CNIC details and payment information — is stored in encrypted form. Encryption keys are managed separately from the data they protect.
• Access controls: Access to systems containing personal data at xp 777 is restricted to staff with a legitimate operational need. Access is logged, monitored and reviewed regularly.
• Two-factor authentication: XP 777 supports two-factor authentication for player accounts to provide an additional layer of protection against unauthorised access. We strongly recommend enabling this in your account settings.
• Regular security reviews: XP 777's security infrastructure is regularly reviewed and updated to address emerging threats and vulnerabilities.

While xp 777 takes extensive precautions, no digital system is completely immune to security threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, xp 777 will notify affected players without undue delay and take immediate remedial action.

08How Long We Keep Your Data

XP 777 retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The general retention principles are:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked back to you. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

09Your Privacy Rights

As a player at xp 777, you have a number of rights in relation to your personal data. These rights are set out below. To exercise any of them, contact support@xp777.best with the subject line "Privacy Rights Request". XP 777 will respond within 30 days of receiving a valid request.

10Marketing Communications

XP 777 will only send you promotional communications — including bonus offers, PSL betting promotions and new feature announcements — if you have actively opted in to receive them at the time of registration or subsequently through your account settings. We will not send you unsolicited marketing.

You can withdraw consent for marketing communications at any time by:

• Clicking the unsubscribe link in any xp 777 marketing email.
• Updating your communication preferences in your xp 777 account settings.
• Contacting support@xp777.best with a request to be removed from marketing lists.

Withdrawal of consent for marketing does not affect your ability to use the xp 777 platform or receive essential service communications such as transaction confirmations, password resets and responsible gaming notifications. These service messages are not marketing and will continue to be sent as part of the platform service.

11Minors & Age Verification

XP 777 is strictly an adult platform — players must be 18 years of age or older to register. We do not knowingly collect personal data from individuals under 18. Age verification is built into the registration process and may be supplemented by CNIC verification for all accounts.

If xp 777 becomes aware that personal data has been collected from a player who is under 18, that account will be suspended immediately, all data associated with the minor will be deleted in accordance with applicable law, and any deposits will be returned to the originating payment method.

12Changes to This Privacy Policy

XP 777 reserves the right to update this Privacy Policy as our practices evolve, as new legal requirements emerge or as the platform adds new features. When material changes are made, we will notify registered Pakistani players via email and/or a prominent notice on the xp777.best platform.

The "Last Updated" date at the top of this policy will always reflect the most recent revision. We encourage you to review this policy periodically. Your continued use of xp 777 following notification of changes constitutes your acceptance of the updated policy. If you do not accept material changes, you should stop using the platform and close your account.

13Contact XP 777 About Privacy

For any question, concern or request relating to your personal data and how xp 777 handles it, please contact us directly. We aim to respond to all privacy-related enquiries within 24 hours and to resolve all data rights requests within 30 days.

• Email: support@xp777.best — use the subject line "Privacy Rights Request" for data access, correction or deletion requests.
• Live Chat: Available directly on the xp 777 platform 24/7 after login.

For responsible gaming concerns — separate from privacy — visit the dedicated Responsible Gaming page where you can configure account protections directly. For questions about how your data fits into our broader terms of service, see our Terms and Conditions.