Privacy & Data Protection

XS777 Privacy Policy – How We Protect Your Data

At XS777, we take your privacy seriously. When you register an account and play on our platform, you share personal information with us – and you deserve to know exactly what we collect, why we collect it, how it is used, and how it is kept safe. This page explains all of that in plain, straightforward English.

Last Updated: 1 January 2025 Applies to: Pakistan Players
xs777

Who this policy applies to: This Privacy Policy applies to all individuals who visit, register on, or interact with the XS777 online casino platform at xs777.im ("the Platform"). By registering an Account or using any feature of the Platform, you confirm that you have read this policy and consent to the collection and use of your personal data as described herein. If you do not agree, please do not use the Platform.

1

Who We Are – The Data Controller

XS777, accessible at xs777.im, is the data controller responsible for the personal information collected through the Platform. We are a licensed online gaming operator operating under an international gaming licence. For the purposes of this Privacy Policy, "XS777", "we", "us", and "our" all refer to the licensed operator of the Platform and its associated entities.

As data controller, XS777 determines the purposes and means by which your personal data is processed. We are responsible for ensuring that your data is handled in accordance with applicable data protection principles, including data minimisation, purpose limitation, accuracy, storage limitation, and integrity and confidentiality.

Our designated Data Protection contact can be reached at privacy@xs777.im. If you have any concerns about how XS777 processes your personal information, this is the correct channel for data-related enquiries separate from general customer support.

2

Personal Data We Collect

XS777 collects only the personal data that is necessary to provide our services, comply with our legal obligations, and protect both players and the Platform from fraud and misuse. The categories of data we collect are described below.

CategoryExamplesCollected When
Identity DataFull legal name, date of birth, CNIC number, genderRegistration & KYC verification
Contact DataMobile number, email address, city of residenceAccount registration
Financial DataPayment method type, account/wallet identifiers, transaction historyDeposits & withdrawals
Technical DataIP address, device type, browser, operating system, session timestampsAutomatically, on Platform use
Gaming DataGame history, bet amounts, win/loss records, bonus usageDuring gameplay
Communications DataLive chat transcripts, email correspondence, support ticketsWhen you contact support
KYC DocumentsCNIC scan, proof of address, selfie for identity verificationKYC process (as required)
Preference DataMarketing opt-in/out, language preference, responsible gaming settingsAccount settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by a responsible gaming assessment and with your explicit consent. We never collect more data than is strictly necessary for the defined purpose.

3

How We Collect Your Data

XS777 collects your personal data through the following channels and methods:

  • Direct collection: Information you provide when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account settings.
  • Automated collection: Technical and usage data collected automatically when you visit or use the Platform, including via cookies, server logs, and session tracking technologies. See Section 8 for full details on cookies.
  • Third-party sources: Identity verification data from KYC service providers; fraud prevention data from specialist screening partners; payment processing data from Easypaisa, JazzCash, NayaPay, SadaPay, banks, and card processors.
  • Game providers: Gaming activity data from our licensed game providers (Evolution Gaming, Pragmatic Play, Ezugi, Spribe, and others) is transmitted to XS777 in real time to maintain accurate account balances and betting history.
xs777
4

Why We Use Your Personal Data

XS777 uses your personal data for clearly defined purposes. We do not use data for purposes beyond those listed below without first notifying you and, where required, obtaining your consent.

Account Management

Creating and maintaining your XS777 Account, processing your login, managing your balance, and sending transaction confirmations and account notifications.

Regulatory Compliance

Meeting our obligations under our gaming licence, including KYC verification, age checks, anti-money laundering (AML) monitoring, and reporting to licensing authorities.

Payment Processing

Processing your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions securely and accurately in PKR.

Fraud Prevention

Detecting and preventing fraud, bonus abuse, collusion, money laundering, and the use of multiple accounts by the same individual.

Responsible Gaming

Monitoring player activity patterns to identify potential problem gambling behaviour and enforce the responsible gaming tools you have set on your Account.

Platform Improvement

Using aggregated, anonymised usage data to understand how players interact with XS777, improve platform performance, and identify which features need development.

5

Legal Basis for Processing

XS777 processes your personal data on the following legal grounds, depending on the specific purpose:

  • Contractual necessity: Processing required to perform the contract between you and XS777 – i.e., to provide you with an Account, process your bets, and handle your deposits and withdrawals.
  • Legal obligation: Processing required to comply with our gaming licence conditions, AML regulations, KYC requirements, and any directives from our licensing authority.
  • Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and product improvement – where these interests are not overridden by your rights and interests.
  • Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.
6

Who We Share Your Data With

XS777 does not sell your personal data to third parties. We share data only with the categories of recipients described below, and only to the extent necessary for the specific purpose.

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner banks, and Visa/Mastercard networks – to process your financial transactions in PKR.
  • Game providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Hacksaw Gaming, and other licensed studios – to provide and verify the outcome of games you play on the Platform.
  • KYC / AML partners: Specialist identity verification and anti-money laundering screening services that help us verify your identity and screen transactions against financial crime databases.
  • IT and hosting providers: Cloud infrastructure and cybersecurity service providers who process data on our behalf under strict data processing agreements that prohibit independent use of your data.
  • Regulatory and legal authorities: Our licensing authority, financial intelligence units, and law enforcement agencies – where we are required by law or gaming licence conditions to report information.

All third parties who handle your data on behalf of XS777 are bound by contractual obligations that require them to keep your information confidential and process it only for the specific purpose for which it was shared. They are not permitted to sell, rent, or independently market your data.

7

How Long We Keep Your Data

XS777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or our gaming licence. The following retention periods apply:

Data TypeRetention PeriodReason
Account & identity data5 years after account closureGaming licence & AML compliance
KYC documents5 years after account closureLegal & regulatory obligation
Financial transactions7 years after transactionFinancial record-keeping
Game history3 years after last activityDispute resolution & audit
Support communications3 years from last contactQuality & dispute management
Technical / log data12 monthsSecurity monitoring
Marketing preferencesUntil opt-out, then 1 yearCompliance with consent records

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

8

Cookies & Tracking Technologies

XS777 uses cookies and similar tracking technologies to make the Platform work properly, to understand how players use it, and – where you have consented – to personalise your experience. A cookie is a small text file placed on your device when you visit a website.

You can manage optional cookies through your browser settings at any time. Blocking strictly necessary cookies will affect Platform functionality. Blocking optional cookies will not prevent you from using any core feature of XS777. Your cookie preferences can also be updated by contacting us at privacy@xs777.im.

xs777
9

How We Keep Your Data Secure

XS777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

  • SSL/TLS encryption: All data transmitted between your device and our servers is protected by industry-standard 256-bit SSL encryption, the same level used by major international banks.
  • Encrypted storage: Sensitive data including passwords (stored as salted hashes), financial identifiers, and KYC documents are encrypted at rest in our databases.
  • Access controls: Personal data is accessible only to XS777 staff and contractors who need it to perform their job functions. All access is logged and regularly audited.
  • Two-factor authentication: Available for all Player Accounts and mandatory for administrative access to internal systems.
  • Intrusion detection: Continuous monitoring of network traffic and system logs for anomalous activity, with automated alerts and response procedures.
  • Regular security audits: Periodic penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.

While XS777 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account safe – use a strong, unique password for your XS777 Account and never share your login credentials with anyone.

10

Your Data Rights

As a player at XS777, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at privacy@xs777.im. We will respond within 30 days.

Right of Access

You may request a copy of all personal data we hold about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most information directly from your Account settings.

Right to Erasure

In certain circumstances, you may request deletion of your personal data. This right is limited where we are required to retain data by law or for legitimate compliance purposes such as AML record-keeping.

Right to Restrict Processing

You may ask us to temporarily stop processing your data in certain situations, such as while a dispute about its accuracy is resolved. We will still be able to store the data during this period.

Right to Portability

You may request a copy of your personal data in a structured, machine-readable format. This applies to data you have provided to XS777 and which is processed on the basis of your consent or our contract with you.

Right to Object

You may object to processing carried out on the basis of legitimate interests, and you may opt out of marketing communications at any time without any effect on your ability to use the Platform.

To exercise any of these rights, please write to us at privacy@xs777.im with the subject line "Data Rights Request" and include your Account username and the specific right you wish to exercise. We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests, but may decline manifestly unfounded or excessive requests.

11

Children's Privacy – Under-18 Strictly Prohibited

XS777 is strictly an adults-only Platform. We do not knowingly collect personal data from any individual under 18 years of age. If we discover that an Account has been registered by someone under 18, we will immediately close the Account, delete all associated personal data (subject to any mandatory legal retention periods), and void any associated transactions.

If you are a parent or guardian and believe that your child may have registered an Account on XS777, please contact us immediately at privacy@xs777.im. We will investigate and take appropriate action as quickly as possible. We strongly encourage parents and guardians to use parental control software to prevent access to online gambling platforms.

12

Third-Party Links

The XS777 Platform contains links to third-party services that are necessary for platform operation, such as payment processors and game providers. This Privacy Policy applies only to data collected directly by XS777. We are not responsible for the privacy practices of any third-party service, and we encourage you to read the privacy policies of any third-party services you interact with.

When you make a payment through Easypaisa, JazzCash, or any other payment provider, that transaction is also governed by the privacy policy of that payment provider. XS777 only receives confirmation of the transaction outcome and the masked identifier of your payment account – we do not receive your full payment credentials.

13

Marketing Communications

XS777 may send you promotional emails and SMS messages about bonuses, new games, and platform updates – but only if you have explicitly opted in to receive such communications. Marketing consent is requested during registration and can be updated at any time from your Account settings or by contacting us at support@xs777.im.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email. Opting out of marketing communications will not affect your ability to use any feature of the XS777 Platform, and it will not affect transactional notifications such as deposit confirmations, withdrawal updates, and security alerts, which are sent regardless of marketing preferences.

Self-excluded players: If you have activated self-exclusion through XS777's Responsible Gaming tools, all marketing communications will be suspended immediately and for the duration of your self-exclusion period. This happens automatically and you do not need to unsubscribe separately.

14

Updates to This Privacy Policy

XS777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The "Last Updated" date at the top of this page reflects the most recent version. When we make material changes to this policy, we will notify registered players via email or an in-platform notification before the changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the XS777 Platform after any update to this policy constitutes your acceptance of the revised terms. If you disagree with a material change and wish to close your Account as a result, you may do so by contacting support@xs777.im.

15

How to Contact Us

For any questions, concerns, or requests related to this Privacy Policy or to your personal data, please use the contact information below. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 days.

Privacy enquiries: privacy@xs777.im
General support: support@xs777.im | Live chat at xs777.im (24/7)
Website: xs777.im
Privacy team hours: Monday–Friday, 09:00–18:00 PKT (support team available 24/7)

Please also refer to our Terms and Conditions and Responsible Gaming pages, which together with this Privacy Policy form the complete agreement governing your use of the XS777 Platform.

Your Privacy Is a Priority at XS777

Six ways XS777 puts data protection into practice every day

256-bit SSL Encryption

Every piece of data that travels between your device and XS777's servers is encrypted with 256-bit SSL – the same standard used by international banks. Your login details, financial transactions, and personal information are protected in transit at all times.

Encrypted Data at Rest

Stored data at XS777 is encrypted at the database level. Passwords are never stored as readable text – only as salted cryptographic hashes. KYC documents are stored in encrypted containers with access restricted to authorised compliance staff only.

No Data Sales – Ever

XS777 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to provide you with our services and meet our legal obligations. This is a firm policy, not a flexible guideline.

Full Control Over Your Data

XS777 gives you real, practical control over your personal information. You can update your profile, manage marketing preferences, request a copy of your data, or ask for deletion – all through your Account settings or by emailing privacy@xs777.im.

Clear Data Retention Rules

We don't hold your data indefinitely. XS777 has clear, published retention periods for every category of data we collect. Once those periods expire, data is securely deleted or anonymised. We don't keep information around because it might be useful one day.

Consent-Based Marketing

XS777 only sends promotional communications to players who have explicitly opted in. Self-excluded players are automatically removed from all marketing lists. Opting out is immediate and has no effect on your ability to play or withdraw at XS777.

Play at XS777 with Complete Peace of Mind

Your data is safe with us. Join over 500,000 Pakistani players who trust XS777 for their online casino entertainment. Registration takes under two minutes and your first deposit bonus is waiting.

18+ only. Gambling involves financial risk. Please play responsibly.