xe777 Privacy Policy

1. Introduction

xe777 ("xe777", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who visit, register on, or interact with the xe777 online gaming Platform accessible at xe777.app and its associated subdomains and mobile interfaces (the "Platform").

This Privacy Policy ("Policy") explains in clear terms what personal data xe777 collects from you, for what purposes it is used, how it is stored and protected, with whom it may be shared, and what rights you have in relation to that data. This Policy applies to all users of the xe777 Platform, including registered players from across Pakistan — whether you are in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, or elsewhere.

By accessing or using the xe777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with the xe777 Terms & Conditions and our Responsible Gaming Policy.

2. Data Controller

xe777 is the data controller responsible for your personal data collected through the Platform. xe777 operates under an internationally recognised gaming licence and processes personal data in accordance with applicable data protection regulations.

All enquiries relating to the processing of your personal data — including requests to exercise your data subject rights — should be directed to xe777's data protection contact as detailed in Section 14 of this Policy.

3. Personal Data We Collect

xe777 collects personal data through various means, including directly from you at registration and during Platform use, from identity verification processes, and automatically through your interaction with the Platform. The categories of personal data we collect include:

3.1 Registration & Identity Data:

• Full name as it appears on your Pakistani CNIC
• CNIC number and copies of CNIC documentation (front and back)
• Date of birth
• Pakistani mobile number
• Account username and encrypted password
• Residential address (city and province within Pakistan)

3.2 Financial Data:

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT wallet addresses)
• PKR account balance history
• Bonus and promotional credit records

3.3 Gaming & Betting Activity Data:

• Game session logs including games played, bets placed, and outcomes
• Sports betting history including markets selected, stakes, and settlement results
• Responsible gaming tool settings and usage (deposit limits, session reminders, self-exclusion requests)

3.4 Technical & Device Data:

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session login timestamps and access logs
• Cookie data and Platform interaction analytics (see Section 9)

3.5 Communications Data:

• Records of live chat, email, and any other communications with xe777 customer support
• Feedback and complaint records

4. How We Use Your Personal Data

xe777 uses your personal data for the following purposes:

• Account Creation & Management: To register and maintain your xe777 account, authenticate your identity on login, and manage your account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and bonus credits, and to maintain accurate financial records associated with your account.
• KYC & AML Compliance: To verify your identity in compliance with our licensing obligations and applicable anti-money laundering regulations. xe777 is required to conduct identity verification on all accounts and to monitor transactions for suspicious activity.
• Responsible Gaming: To monitor gameplay patterns, identify indicators of potential problem gambling behaviour, and proactively apply responsible gaming interventions where appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account, payment, and gaming matters.
• Platform Security: To detect, prevent, and investigate fraud, cheating, unauthorised access, and other prohibited conduct on the xe777 Platform.
• Legal & Regulatory Obligations: To comply with applicable laws, respond to regulatory enquiries, and fulfil reporting obligations to our licensing authority.
• Service Improvement: To analyse aggregated, anonymised usage data to improve Platform performance, user experience, and game offerings.
• Direct Communications: To send you service-related notifications, security alerts, and — where you have consented — promotional communications about xe777 offers and new features. You may opt out of promotional communications at any time via your account settings.

5. Legal Basis for Processing

xe777 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the xe777 gaming services you have registered for and to manage your account.
• Legal Obligation: Processing required to comply with KYC, AML, licensing, and other applicable regulatory requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and certain non-essential cookies, where your specific consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Disclosure

xe777 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Your data may be shared in the following limited circumstances:

• Payment Processors: Transaction data is shared with payment service providers including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency processing services solely to facilitate deposits and withdrawals.
• Identity Verification Services: CNIC and registration data may be shared with authorised KYC verification partners to confirm your identity and age in accordance with our licensing obligations.
• Game Providers: Technical gameplay data may be shared with licensed game studios (such as Pragmatic Play, PG Soft, JILI, and Evolution Gaming) for the purpose of game operation, fairness auditing, and dispute resolution.
• Regulatory & Law Enforcement Authorities: xe777 will disclose personal data to regulators, law enforcement agencies, or governmental authorities where required to do so by applicable law, court order, or regulatory direction.
• Group Companies & Successors: Personal data may be shared within the xe777 corporate group and with any successor entity in the event of a merger, acquisition, or corporate restructuring, subject to equivalent data protection obligations.

All third parties with whom xe777 shares personal data are contractually required to process that data only for the specified purpose and in accordance with applicable data protection standards.

7. International Data Transfers

xe777 may transfer personal data to servers and service providers located outside Pakistan in connection with Platform operations, hosting infrastructure, and third-party service providers. Where such transfers occur, xe777 ensures that appropriate safeguards are in place — including contractual data protection obligations consistent with internationally recognised standards — to protect your personal data to an equivalent level as it would be protected within Pakistan.

8. Data Retention

xe777 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and our licensing obligations. Specifically:

• Account and KYC documentation is retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs are retained for a minimum of three (3) years from the date of the session.
• Communications with customer support are retained for a minimum of two (2) years from the date of the last interaction.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with xe777's data disposal procedures.

9. Cookies & Tracking Technologies

The xe777 Platform uses cookies and similar tracking technologies to support Platform functionality and improve user experience. The categories of cookies used are:

• Essential Cookies: Strictly necessary for Platform operation, including session management, login authentication, and security token handling. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and account configuration to provide a more personalised experience on the xe777 Platform.
• Analytics Cookies: Aggregated, anonymised data used to understand how users navigate the Platform and to identify areas for improvement. This data does not identify individual users.

xe777 does not use third-party advertising cookies to track your activity across other websites. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent certain xe777 Platform features from functioning correctly.

10. Your Data Protection Rights

Subject to applicable law and the legitimate processing requirements of xe777's licensing obligations, you have the following rights in relation to your personal data:

• Right of Access: The right to obtain confirmation of whether xe777 holds personal data about you and to receive a copy of that data.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by xe777.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances, subject to xe777's legal and regulatory retention obligations.
• Right to Restrict Processing: The right to request that xe777 limits the processing of your personal data in certain circumstances while a dispute or correction request is under review.
• Right to Data Portability: The right to receive a copy of personal data you have provided to xe777 in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: The right to object to processing of your personal data based on xe777's legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact xe777 customer support as described in Section 14. We will respond to verified requests within thirty (30) days. Requests may be declined where they conflict with xe777's legal obligations, including KYC and AML retention requirements.

11. Children's Privacy

The xe777 Platform is strictly intended for adults aged 18 and above. xe777 does not knowingly collect personal data from any person under the age of 18. CNIC-based age verification is applied to all account registrations to enforce this requirement. If xe777 becomes aware that personal data has been collected from a person under 18 without appropriate consent, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 18 may have registered on the xe777 Platform, please contact us immediately.

12. Data Security

xe777 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and xe777 servers
• Encrypted storage of sensitive personal data including passwords (salted and hashed) and financial records
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists
• Incident response procedures for the prompt detection, containment, and notification of data security breaches

While xe777 employs industry-standard security measures, no internet-based system is completely immune to security risks. You are also responsible for maintaining the security of your xe777 account credentials. Report any suspected unauthorised access to xe777 support immediately.

13. Changes to This Privacy Policy

xe777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our processing activities, or Platform operations. Material changes will be communicated to registered users via the mobile number or contact details associated with their account, or by a prominent notice on the Platform, prior to the changes taking effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the xe777 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xe777, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the xe777 Platform — our preferred channel for prompt assistance (average response time under 3 minutes)
• Email: [email protected]

When submitting a data subject rights request, please provide sufficient information to allow xe777 to verify your identity before we can action your request. This typically includes your registered mobile number and CNIC reference.