777xa Privacy Policy

1 Introduction

777xa ("the Platform", "we", "us", "our") operates the online gaming and sports betting platform accessible at 777xa.net. We are committed to protecting the privacy and personal data of all registered players and visitors ("you", "your") in accordance with applicable data protection laws and our international gaming licence obligations.

This Privacy Policy ("Policy") describes in detail how 777xa collects, uses, stores, discloses, and protects your personal data when you visit our website, register an account, make deposits or withdrawals, place wagers, or otherwise interact with any 777xa service. Please read this Policy carefully alongside our Terms & Conditions, which together govern your relationship with 777xa.

2 Data Controller

For the purposes of applicable data protection legislation, 777xa is the data controller responsible for your personal data. This means we determine the purposes and means by which your personal data is processed. Where third-party processors handle your data on our behalf (for example, payment processors or KYC verification providers), they do so strictly under our instructions and are contractually bound to protect your data to the same standard we apply internally.

All data protection enquiries, subject access requests, and complaints should be directed to our Data Protection contact at [email protected] with the subject line "Privacy / Data Request".

3 Data We Collect

3.1 Information You Provide Directly

When you register an account, verify your identity, contact support, or use any 777xa service, you provide us with personal data including but not limited to:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (CNIC / passport / driver's licence number).
• Contact Data: Mobile phone number, email address, and residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan).
• Financial Data: Payment method details (JazzCash or EasyPaisa mobile wallet number, HBL or UBL bank account details, SadaPay handle, or USDT wallet address), transaction history, deposit and withdrawal records.
• Verification Documents: Copies of identity documents and proof-of-address documents submitted for KYC compliance.
• Account Preferences: Responsible gaming limits you have set, communication preferences, and language settings.
• Support Communications: Records of correspondence you have with our customer support team, including live chat transcripts and email exchanges.

3.2 Data Collected Automatically

When you access the 777xa platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, betting history, session duration, click-stream data, and feature interactions.
• Location Data: Approximate geographic location derived from your IP address for compliance and fraud prevention purposes. We do not access your device's precise GPS location.
• Cookie Data: Data stored and retrieved through cookies and similar tracking technologies as described in Section 6.

3.3 Data Received from Third Parties

In certain circumstances, 777xa may receive personal data about you from third parties, including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors and financial institutions who provide transaction confirmation and fraud screening data.
• Anti-fraud and AML screening services that cross-reference your details against sanctions lists and politically exposed persons (PEP) databases.
• Marketing partners (where you have consented to your data being shared with them) who refer you to the 777xa platform.

4 How We Use Your Data

777xa uses your personal data only for the purposes set out below. We do not use your data for any purpose incompatible with the purpose for which it was originally collected without obtaining your further consent.

5 Legal Basis for Processing

777xa processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to perform the contract we have with you — primarily the provision of gaming services, account management, and payment processing.
• Legal Obligation: Processing is required to comply with our regulatory obligations under our international gaming licence, including KYC, AML, responsible gaming, and data retention requirements.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and business analytics, provided those interests are not overridden by your fundamental rights.
• Consent: For certain processing activities — particularly direct marketing communications and non-essential cookies — we rely on your explicit, freely given consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 777xa website. They allow us to recognise your device on return visits, maintain your session, and gather analytical data about how the platform is used. Similar technologies such as web beacons, pixel tags, and local storage objects may also be used for equivalent purposes.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly — including session authentication, security tokens, and fraud prevention signals. These cannot be disabled without breaking core functionality.
• Performance & Analytics Cookies: Collect anonymised data about how players navigate the platform to help us identify areas for improvement. No personally identifiable information is stored in these cookies.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming limit configurations so you do not have to reset them on each visit.
• Marketing Cookies: Used to deliver relevant promotional content within the 777xa platform based on your gaming activity and preferences. These are only activated with your consent.

6.3 Managing Cookies

You can manage your cookie preferences through the cookie consent panel accessible from the platform settings. You can also configure your browser to block or delete cookies; however, doing so may impair the functionality of the 777xa platform, including your ability to log in and maintain a gaming session.

7 Data Sharing & Disclosure

777xa does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients strictly as necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT network facilitators receive transactional data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party services that verify the authenticity of identity documents and confirm that you meet our age (21+) and eligibility requirements.
• AML & Fraud Screening Services: Providers that screen your data against international sanctions lists, PEP registers, and adverse media databases in fulfilment of our compliance obligations.
• Game Content Providers: Providers such as Playtech and other licensed game studios may receive anonymised session data necessary for game delivery and fair-play auditing. They do not receive your full identity or payment information.
• Cloud Infrastructure & Hosting Providers: Our platform infrastructure relies on third-party cloud hosting services bound by strict data processing agreements.
• Regulatory & Law Enforcement Authorities: We are legally obligated to disclose certain personal data to our licensing authority and, where required by law or court order, to law enforcement agencies and financial intelligence units.
• Professional Advisers: Lawyers, accountants, auditors, and insurers who require access to your data in the course of providing services to 777xa, subject to professional confidentiality obligations.

All third-party data processors are bound by contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process your data only as instructed by 777xa.

8 International Data Transfers

Given that 777xa operates under an international gaming licence, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 777xa takes steps to ensure that your data receives an equivalent level of protection to that which it would receive in its country of origin, by implementing appropriate transfer safeguards such as standard contractual clauses, binding corporate rules, or relying on adequacy decisions where applicable.

If you have questions about the specific safeguards applied to any particular international transfer of your data, you may contact us at [email protected].

9 Data Retention

777xa retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of 5 years after account closure, in compliance with AML and gaming licence record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years following the date of the transaction in accordance with anti-money laundering regulations.
• KYC Documents: Identity and verification documents are retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Support Communications: Customer support correspondence is retained for 3 years from the date of the last communication in a given case.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for 3 years from the date of the relevant action.
• Cookie and Analytics Data: Anonymised analytics data may be retained for up to 2 years. Cookie-level identifiers are rotated in accordance with browser-standard expiry periods.

When your personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

10 Your Privacy Rights

Subject to applicable law and certain regulatory exceptions (particularly those arising from our AML and gaming licence obligations), you hold the following rights in respect of your personal data held by 777xa:

To exercise any of these rights, please submit a written request to [email protected] with "Data Rights Request" in the subject line. We will respond within 30 calendar days. We may require you to verify your identity before processing your request. Please note that certain rights may be limited where data retention is mandated by our licensing or AML obligations.

11 Security Measures

777xa employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• TLS/SSL Encryption: All data transmitted between your device and the 777xa platform is encrypted in transit using TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data and financial records stored in our databases are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security awareness training.
• Two-Factor Authentication: Account login supports two-factor authentication (2FA) to protect your account from unauthorised access. We strongly encourage all players to enable 2FA.
• Fraud Monitoring: Automated real-time monitoring systems detect and flag unusual account activity, including login anomalies and suspicious transaction patterns.
• Penetration Testing: The 777xa platform undergoes regular third-party security assessments and penetration tests to identify and address vulnerabilities.

12 Children's Privacy

The 777xa platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect, store, or process personal data from any individual under the age of 21. If we become aware that personal data has been collected from a person under 21, we will promptly delete that data and close the associated account in accordance with our underage player policy.

If you believe that a minor has registered an account on the 777xa platform, please notify us immediately at [email protected]. Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. Please visit our Responsible Gaming page for further guidance.

13 Third-Party Services & Links

The 777xa platform integrates third-party game content from licensed providers and may display informational content referencing external resources. Third-party game providers operate their own data processing practices as described in their respective privacy notices; 777xa's privacy policy does not govern those practices.

777xa is not responsible for the privacy practices of any third-party services that you access independently. We encourage you to read the privacy policies of any third-party services you use in connection with your gaming activity.

14 Marketing Communications

With your explicit consent, 777xa may send you promotional communications about bonuses, new games, PSL cricket betting markets, and other platform features via SMS, push notification, or email. These communications are tailored to your gaming preferences and account activity to ensure they are relevant to you.

14.1 Opting Out

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your 777xa account settings panel.
• Replying "STOP" to any SMS communication from 777xa.
• Contacting customer support at [email protected] with "Unsubscribe" in the subject line.

Withdrawal of marketing consent does not affect transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages, which are sent as a necessary part of operating your account.

15 Changes to This Policy

777xa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The effective date at the top of this Policy will be updated accordingly.

Where changes are material — meaning they significantly affect your rights or how your data is used — we will notify you via the contact details registered to your account at least 14 calendar days before the changes take effect. Your continued use of the 777xa platform after the effective date of any revised policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed.

16 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 777xa handles your personal data, please contact our data protection team:

• Email: [email protected] — subject line: "Privacy / Data Request"
• Live Chat: Available 24/7 via the chat widget on the 777xa platform

We take all privacy complaints seriously. Upon receiving your complaint, we will acknowledge receipt within 48 hours and aim to provide a substantive response within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction or to the dispute resolution mechanism provided under 777xa's international gaming licence.