777 xp Privacy Policy – Your Data, Handled With Care

1. Introduction

This Privacy Policy explains how 777 xp ("we", "us", "the Platform") — accessible at https://777xp.im — collects, uses, stores and protects the personal information of users ("you", "the Player") who register an account, visit the website, or use any of the services offered on the platform.

At 777 xp, we understand that Pakistani users entrust us with sensitive information — mobile numbers, payment details, and in some cases identity documents. That trust is not taken lightly. This policy is written to be genuinely readable, not to obscure obligations in legal complexity. If something is unclear, contact us directly and we will explain it plainly.

This Privacy Policy forms part of the overall agreement between you and 777 xp, alongside the Terms and Conditions and Responsible Gaming guidelines. By registering an account or using the platform, you confirm that you have read and accept this policy.

2. What Data We Collect

777 xp collects the following categories of personal data. We collect only what is genuinely needed to operate your account, process transactions and comply with applicable regulations.

2.1 Registration Data

• Mobile phone number (used as your primary login identifier at 777 xp)
• Full legal name
• Date of birth (required for age verification — you must be 18 or older)
• Account password (stored in hashed form — we cannot see your plain-text password)

2.2 Verification Data

• CNIC (Computerised National Identity Card) number and/or scan — required for identity verification at certain thresholds
• Proof of address documentation where requested
• Selfie or live photograph for facial comparison where identity verification requires it

2.3 Financial Data

• Easypaisa, JazzCash, NayaPay or SadaPay wallet numbers used for deposits and withdrawals
• Bank account or IBAN details for IBFT transfers
• Masked card details for Visa/Mastercard transactions (full card numbers are handled by our payment processor, not stored by 777 xp directly)
• Transaction history — deposit amounts, withdrawal amounts, dates and reference numbers, all in PKR

2.4 Betting and Gaming Activity

• Bet history — markets selected, stakes placed, odds accepted, results and winnings
• Session data — login times, session durations, games accessed, features used
• Responsible gaming settings — limits set, cooling-off periods requested, self-exclusion status

2.5 Technical and Device Data

• IP address at the time of login or bet placement
• Device type, operating system and browser version
• Mobile network or ISP information
• Cookie identifiers and session tokens (see Section 10)

2.6 Communications Data

• Records of live chat conversations with the 777 xp support team
• Email correspondence with support@777xp.im
• Records of account notifications sent to you

3. How We Collect Your Data

777 xp collects data through three main channels:

3.1 Directly From You

The majority of data we hold is provided by you directly — during registration, account verification, deposit and withdrawal requests, when placing bets, when contacting support, and when updating your account settings. You are in control of what you provide.

3.2 Automatically Through Platform Use

When you access 777 xp, certain data is collected automatically by our systems. This includes your IP address, device information, session timing and navigation behaviour within the platform. This data is used for fraud prevention, security monitoring and improving platform performance — not for building advertising profiles.

3.3 From Third-Party Verification Providers

When 777 xp requests identity verification, we may use a third-party provider to cross-reference the documents you submit against external databases. The information returned from these checks (verification pass/fail, match confidence) is stored on your account record. The third-party provider is bound by contractual data protection obligations.

4. How We Use Your Data

The data 777 xp holds about you is used for specific, defined purposes. We do not use data for any purpose beyond what is described here without first informing you and, where required, obtaining your consent.

5. Legal Basis for Processing

777 xp processes your personal data on one or more of the following legal bases, depending on the purpose:

• Contract performance: Processing necessary to provide the services you registered for — account management, bet processing, payment handling. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws — including identity verification requirements, financial record-keeping and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring and service improvement, where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications, where you have actively opted in. You may withdraw consent at any time without affecting any other aspect of your account.

6. Who We Share Your Data With

777 xp does not sell, rent or trade your personal data. Sharing occurs only in the following defined circumstances, and only the minimum data required for each purpose is disclosed:

6.1 Payment Processors

To process your PKR deposits and withdrawals, 777 xp shares transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, banking partners for IBFT, and card processing networks for Visa/Mastercard. These providers are independently regulated and operate under their own data protection obligations.

6.2 Identity Verification Providers

When identity verification is required, we may share your submitted documents with a third-party KYC (Know Your Customer) verification provider. This provider is contracted under strict data protection obligations and is not permitted to use your data for any purpose beyond the verification service.

6.3 Regulatory and Legal Authorities

777 xp may be required by law to disclose certain data to regulatory bodies, law enforcement agencies or courts. In such cases, we disclose only the data specifically required and will, where legally permitted, inform you that such a request has been made.

6.4 Fraud Prevention Services

We may share certain technical identifiers (IP addresses, device fingerprints) with fraud prevention networks to detect and prevent account misuse across platforms. This is done in our legitimate interest in protecting the platform and all legitimate users.

7. Payment Data and PKR Transactions

All financial transactions on 777 xp are denominated in Pakistani Rupees. The platform handles payment data with a specific set of protections given its sensitivity:

• Full card numbers for Visa/Mastercard transactions are handled directly by our PCI-DSS compliant payment processor. 777 xp stores only the masked card reference and the last four digits — never the full card number, CVV or expiry date in plain form.
• Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay) are stored in encrypted form and used only for processing your transactions and verifying that withdrawals are returned to a method you own.
• Bank account details for IBFT transfers are stored in encrypted form, used only for processing withdrawals and retained for the period required by financial record-keeping regulations.
• Transaction records — amounts, dates, references — are retained as part of your account history and are accessible to you at any time through your account dashboard.

8. How We Keep Your Data Secure

Security is not a single measure — it is a combination of technical controls, organisational policies and ongoing monitoring. At 777 xp, the following measures are in place to protect your personal data:

• Encryption in transit: All data exchanged between your browser or device and 777 xp servers is protected by TLS (Transport Layer Security). You will see HTTPS in your browser address bar whenever you are on the platform.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256. Even in the unlikely event of a database breach, data is not readable without the encryption keys, which are held separately.
• Access controls: Access to systems holding personal data is restricted to 777 xp staff members who require it to perform their role. Access is logged and audited.
• Password hashing: Your account password is never stored in plain text. It is hashed using a one-way cryptographic function — meaning 777 xp cannot retrieve your password even if asked.
• Fraud monitoring: Our systems monitor account activity in real time for patterns that may indicate unauthorised access, credential stuffing or account takeover attempts. Suspicious activity triggers automatic security checks.
• Security testing: The 777 xp platform undergoes regular security reviews to identify and address vulnerabilities before they can be exploited.

9. Data Retention

777 xp retains your personal data for as long as is necessary for the purposes described in this policy, and no longer. The following general retention guidelines apply:

• Active accounts: All account data is retained while your account is active and in good standing.
• Closed accounts: Following account closure, core account data (name, contact details, identity verification records) is retained for a minimum of five years for regulatory and anti-money laundering compliance purposes.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction, in line with standard financial record-keeping requirements.
• Betting history: Retained for a minimum of three years from the date of each bet. Active accounts can access their full betting history through their account dashboard at any time.
• Communications records: Live chat transcripts and email correspondence are retained for two years from the date of the conversation, or longer if the correspondence relates to an unresolved dispute.
• Technical and session data: Log files and session data are retained for 90 days for security monitoring purposes, then deleted or anonymised.

When a retention period expires and no other retention obligation applies, data is securely deleted or permanently anonymised so it can no longer be attributed to any individual.

10. Cookies and Tracking

777 xp uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse usage patterns. We do not use advertising or behavioural tracking cookies that build profiles for third-party advertisers.

Essential Cookies

These are required for the platform to function. They include your session token (which keeps you logged in during a visit), security tokens for form submissions, and language or region preference cookies. Without these, basic platform features do not work. You cannot opt out of essential cookies while using 777 xp.

Analytics Cookies

We use anonymised analytics data to understand how users navigate the 777 xp platform — which pages load slowly, where users encounter errors, which features are most used. This data is aggregated and cannot be used to identify individuals. You may opt out of analytics cookies via your browser settings or the cookie preference centre on the platform.

Managing Your Cookie Preferences

Most browsers allow you to view, manage and delete cookies from any website. Deleting 777 xp session cookies will log you out of your current session. Blocking all cookies will prevent you from logging in. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

11. Your Rights Over Your Data

As a 777 xp user, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at support@777xp.im with your account username and a clear description of your request.

12. Children and Underage Users

777 xp is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Age is verified during account registration and may be verified again at any point via identity documentation.

If you are a parent or guardian and believe your child may have registered an account at 777 xp, please contact us immediately at support@777xp.im. We will investigate and close the account promptly if the account holder is found to be under 18. Any funds deposited by an underage user will be returned to the payment source.

Our Responsible Gaming page contains additional guidance on preventing underage access to gambling platforms.

13. Marketing Communications

777 xp may send you promotional communications about new features, offers, bonuses and sports events via SMS or push notification, where you have opted in during registration or through your account settings.

• Opting in to marketing at 777 xp is voluntary. You will not receive promotional messages if you have not opted in.
• You may withdraw your marketing consent at any time by updating your communication preferences in Account Settings or by contacting support at support@777xp.im with the subject "Unsubscribe".
• Withdrawing marketing consent does not affect transactional notifications — you will still receive messages related to deposits, withdrawals, bet settlements and account security regardless of your marketing preference.
• Marketing communications are sent from 777 xp only. We do not pass your contact details to third-party marketing companies.

14. Changes to This Privacy Policy

777 xp may update this Privacy Policy from time to time to reflect changes in how we handle data, changes in applicable regulations, or the introduction of new platform features. When material changes are made, we will:

• Update the "Last updated" date at the top of this policy.
• Notify registered users via SMS or the platform notification system at least seven days before the changes take effect, where the changes affect how your data is used in a meaningful way.
• In cases where changes require your active consent (for example, if we intend to use data for a new purpose not covered by the original policy), we will request that consent explicitly before proceeding.

The current version of this Privacy Policy is always available at https://777xp.im/privacy-policy. We recommend reviewing it periodically, particularly if you receive a notification about an update.

15. Contact — Privacy Queries and Data Requests

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how 777 xp handles your personal information, please contact us through one of the following channels:

• Live Chat: Available 24/7 within the 777 xp platform. For general privacy questions, our support team can assist directly or escalate to the appropriate internal contact.
• Email: support@777xp.im — for formal data rights requests, please include "Data Rights Request" in the subject line and your account username in the body of the email.

We aim to acknowledge all privacy-related emails within 48 hours and to provide a full response within 30 calendar days. For complex requests that require more time, we will inform you before the 30-day deadline and provide an estimated completion date.

If you believe that 777 xp has not handled your personal data in accordance with this policy and you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection or regulatory authority in your jurisdiction.