xy777 Privacy Policy — How We Protect Your Personal Data in Pakistan

01 About This Policy

This Privacy Policy describes how xy777 collects, uses, stores, shares, and protects personal data belonging to players and visitors who use the xy777 platform at xy777.bid. It applies to all Pakistan players who register an account, make a PKR deposit, play games, or otherwise interact with any xy777 service.

This Policy is written in clear English and represents xy777's binding commitment to responsible data handling. It should be read alongside the xy777 Terms & Conditions, which form the complete legal framework governing your use of the xy777 platform.

By registering an account on xy777 or continuing to use the platform after being presented with a notice of this Policy, you confirm your understanding of and agreement to the data practices described herein. If you do not agree with any aspect of this Policy, you should not use the xy777 platform.

02 Data We Collect

xy777 collects personal data through several channels: account registration, identity verification, payment processing, platform activity, and customer support interactions. The categories of data collected are as follows:

xy777 does not collect sensitive personal data such as biometric data, health information, religious beliefs, or political opinions. Data collection is proportionate to the purposes described in Section 3 of this Policy.

03 How We Use Your Data

xy777 uses the personal data collected from Pakistan players for the following specific purposes:

• Account creation and management: To create, maintain, and secure your xy777 player account, including authentication, password recovery, and account settings management.
• Payment processing: To process PKR deposits via Easypaisa, JazzCash, SadaPay, Raast, and Pakistan bank transfers, and to process withdrawal requests to your verified payment method.
• Identity verification (KYC): To verify your identity and age (18+) as required by xy777's responsible gaming obligations and fraud prevention framework.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, money laundering, multi-accounting, and other forms of platform abuse.
• Customer support: To respond to your queries, resolve disputes, and provide assistance through xy777's 24/7 live chat and email support channels.
• Platform improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve game performance, and optimise the xy777 platform experience for Pakistan players.
• Responsible gaming: To monitor account activity patterns that may indicate problem gambling behaviour and to support the delivery of responsible gaming tools including deposit limits and self-exclusion.
• Communications: To send account-related notifications, security alerts, and — where you have opted in — promotional offers relevant to Pakistan players. Marketing communications can be opted out of at any time through account settings.

xy777 does not use personal data for automated profiling that produces significant legal effects on players, and does not use personal data to serve targeted advertising on third-party platforms.

04 Legal Basis for Processing

xy777 processes personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing required to perform the contract between xy777 and the player — including account creation, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable legal obligations — including age verification, anti-money laundering (AML) checks, and fraud reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and anonymised analytics is carried out on the basis of xy777's legitimate interests, balanced against the rights and interests of players.
• Consent: Processing for optional marketing communications, promotional offers, and non-essential cookies is carried out on the basis of the player's freely given, specific, and informed consent, which may be withdrawn at any time.

05 Cookies & Tracking

xy777 uses cookies and similar tracking technologies on the xy777 platform to support essential functionality and to improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the xy777 platform to function correctly. They include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without preventing the platform from operating.
• Functional cookies: These cookies remember your preferences — such as language settings and account display choices — to provide a personalised experience across sessions. They are enabled by default but can be disabled through your browser settings.
• Analytics cookies: xy777 uses anonymised analytics cookies to understand how Pakistan players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players. Analytics cookies are subject to consent where required by applicable law.
• Security cookies: These cookies help xy777 detect and prevent bot activity, multi-accounting, and fraudulent login attempts. They form part of the platform's fraud prevention infrastructure.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair core platform functionality including login and payment processing. xy777 does not use third-party advertising cookies or cross-site tracking cookies.

06 Sharing Your Data

xy777 does not sell your personal data. We share personal data only in the following limited and specific circumstances:

• Payment providers: PKR payment processing requires sharing relevant transaction data with your chosen Pakistan payment provider — Easypaisa, JazzCash, SadaPay, Raast, or your bank. These providers act as independent data controllers for their own processes and are governed by their own privacy policies.
• Game providers: xy777's game library is supplied by third-party providers including Pragmatic Play, PG Soft, JILI, and Evolution Gaming. These providers may receive technical session data (such as player session tokens) necessary to deliver game content. They do not receive your identity or payment data.
• Identity verification services: KYC document verification may be processed by a certified third-party identity verification service provider. Such providers are contractually bound to process data only for the purposes of KYC completion and under equivalent data security standards to those applied by xy777.
• Legal and regulatory authorities: xy777 will disclose personal data to law enforcement, regulatory bodies, or other official authorities where required to do so by applicable law, court order, or regulatory demand.
• Business transfers: In the event of a merger, acquisition, or sale of xy777's business, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Registered players will be notified of any such transfer via their registered email address.

07 PKR Payment Data

Because all xy777 financial transactions are conducted in Pakistani Rupees (PKR) via Pakistan payment methods, xy777 handles payment data with particular care:

• Easypaisa and JazzCash wallet account details used for deposits and withdrawals are stored in encrypted form and are never displayed in full within the xy777 platform interface after initial entry.
• Pakistan bank account details provided for withdrawal processing are stored securely and are used only to process authorised withdrawal requests from the verified account holder.
• PKR transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained as part of the account financial record for a minimum of five years following account closure, in accordance with applicable financial record-keeping obligations.
• xy777 does not store full payment card numbers. Where card-based payment options are introduced in future, card data handling will comply with PCI DSS standards.
• Payment data is never shared with game providers, analytics services, or marketing platforms. Payment data sharing is limited exclusively to the payment processing scenarios described in Section 6.

08 Data Security

xy777 implements a multi-layered technical and organisational security framework to protect Pakistan player data from unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and the xy777 platform is encrypted using TLS 1.2 or higher (256-bit SSL), the same encryption standard applied by Pakistan's major financial institutions.
• Encryption at rest: Sensitive data stored on xy777's servers — including identity documents, financial details, and verification records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to systems holding player personal data is restricted to xy777 personnel with a verified operational need. All staff access is subject to role-based access controls, audit logging, and multi-factor authentication on administrative systems.
• Infrastructure security: xy777's server infrastructure is hosted in data centres with physical security controls, redundant systems, and regular penetration testing by independent security specialists.
• Incident response: xy777 maintains a documented incident response plan. In the event of a data breach affecting Pakistan player data, affected players will be notified within a reasonable timeframe consistent with applicable data protection obligations.

While xy777 takes all reasonable technical measures to protect your data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their xy777 account and to enable any available two-factor authentication features.

09 Data Retention

xy777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfaction of any legal, regulatory, accounting, or reporting obligations:

• Active account data: Personal data associated with an active xy777 account is retained for the duration of the account's active status, plus any mandatory post-closure retention period.
• Financial transaction records: PKR transaction records are retained for a minimum of five years following the relevant transaction, in accordance with applicable financial record-keeping requirements.
• KYC documents: Identity verification documents (CNIC copies, address proofs) are retained for a minimum of five years following account closure, in line with anti-money laundering record-keeping obligations.
• Support communications: Customer support correspondence is retained for three years to support dispute resolution and quality assurance processes.
• Anonymised analytics data: Aggregated, anonymised platform usage data may be retained indefinitely as it contains no personally identifiable information.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised using processes that prevent reconstruction of identifiable information.

10 Your Privacy Rights

As an xy777 player in Pakistan, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the xy777 support team at [email protected]:

• Right of access: You have the right to request a copy of the personal data xy777 holds about you. We will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account details can be updated directly through account settings; identity document corrections require contact with the support team.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent for consent-based processing — you may request deletion of your personal data. Note that erasure requests cannot override mandatory retention obligations such as financial record-keeping requirements.
• Right to restrict processing: You may request that xy777 limit the processing of your personal data in specific circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to data portability: For data processed on the basis of consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests. xy777 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time through account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11 Children's Privacy

xy777 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. The xy777 registration process requires players to confirm they are 18 or older, and xy777 conducts age verification as part of the KYC process.

If xy777 becomes aware that personal data has been collected from an individual under 18, the associated account will be immediately suspended, the data will be securely deleted to the extent permitted by applicable law, and any PKR balance held in the account will be handled in accordance with the xy777 Terms & Conditions applicable to underage accounts.

If you have reason to believe that a person under 18 has registered an account on xy777 using false age information, please contact the xy777 support team immediately via live chat or at [email protected] so that we can investigate and act promptly.

12 Changes to This Policy

xy777 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal obligations, or platform features. The following process applies to all Policy updates:

• The effective date at the top of this page will be updated to reflect the date on which the revised Policy takes effect.
• For material changes — those that meaningfully affect the rights or obligations of Pakistan players — xy777 will provide advance notice via registered email or an on-platform notification, with a minimum of 7 days before the change takes effect.
• Continued use of the xy777 platform after the effective date of any updated Policy constitutes acceptance of the revised terms.
• If you do not accept the updated Privacy Policy, you may request voluntary account closure by contacting the xy777 support team prior to the effective date.

This Privacy Policy was last reviewed and updated on 1 January 2026.

13 Contact & Data Requests

For any privacy-related queries, data rights requests, or concerns about the handling of your personal data by xy777, please contact us through the following channels: