Privacy Policy — 777xp1

1 Who We Are

This Privacy Policy is issued by 777xp1 ("Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://777xp1.org (the "Platform"). 777xp1 operates under an international gaming licence and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws and regulations.

For the purposes of this Privacy Policy, 777xp1 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, we determine the purposes and means by which your personal data is processed.

2 Data We Collect

777xp1 collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify you meet the minimum age requirement of 21 years)
• Residential address, including city, province, and postal code
• Email address and mobile phone number
• CNIC number or passport number (for KYC verification purposes)

2.2 Financial Data

• JazzCash or EasyPaisa wallet identifiers linked to your account
• Bank account details (HBL, UBL, Meezan Bank, or other) where used for transactions
• Debit or credit card details (card number is never stored in full; only masked digits are retained after processing)
• Transaction history, including deposit amounts, withdrawal requests, and dates

2.3 Account & Gaming Data

• Username and encrypted password
• Gaming history, including games played, bet amounts, wager outcomes, and session durations
• Bonus and promotional activity linked to your account
• Responsible gaming settings, including any deposit limits or self-exclusion elections
• Customer support communications and complaint records

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Pages visited on the Platform, time spent on each page, and click-path data
• Session timestamps, login history, and failed login attempts
• Cookie identifiers and similar tracking technology data (see Section 9)

2.5 Verification Documents

Copies of identity documents (CNIC, passport, or driving licence), proof-of-address documents, and proof-of-payment-method documentation submitted during the KYC verification process are retained securely for the period required under our licensing obligations.

3 How We Collect Data

777xp1 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey.
• Automated collection: Technical and usage data collected automatically when you access the Platform, via cookies, server logs, and similar technologies.
• Third-party sources: Identity and address verification data obtained from licensed KYC providers and fraud-screening agencies, which is used to confirm the accuracy of information you have provided.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment networks following a deposit or withdrawal.

4 Why We Process Your Data

The table below sets out the primary purposes for which 777xp1 processes personal data, together with the specific data categories used for each purpose.

5 Legal Basis for Processing

777xp1 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you, including managing your account, processing transactions, and providing access to games and betting markets.
• Legal obligation: Processing required to comply with our obligations under our gaming licence, anti-money laundering regulations, and applicable law — including KYC verification, suspicious transaction reporting, and age verification.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of 777xp1, provided those interests are not overridden by your rights — including fraud prevention, Platform security, and anonymised analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in respect of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

777xp1 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Authorised Service Providers

• KYC and identity verification providers: To verify your identity and age in compliance with our licensing requirements.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks, solely to process your financial transactions.
• Fraud detection and AML screening services: To identify and prevent financial crime and platform abuse.
• Cloud hosting and IT infrastructure providers: Who store and process Platform data on our behalf under strict data processing agreements.
• Customer support technology providers: Who power our live chat and ticketing systems.

All third-party service providers engaged by 777xp1 are contractually required to process personal data only on our instructions and in accordance with applicable data protection standards.

6.2 Regulatory & Legal Disclosure

777xp1 may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, or courts where required by law, by the terms of our gaming licence, or in response to a valid legal order. We will notify affected users of any such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 777xp1 business, personal data held by the Company may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

7 International Data Transfers

777xp1 operates under an international gaming licence, and some of our authorised service providers are located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such transfers occur, 777xp1 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses, data processing agreements, or reliance on adequacy decisions where applicable. By using the 777xp1 Platform, you acknowledge and consent to such international transfers in accordance with this Privacy Policy.

8 Data Retention

777xp1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing obligations and applicable law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction.
• Gaming history: Retained for a minimum of three (3) years following the last recorded activity.
• Customer support records: Retained for two (2) years following the resolution of the relevant case.
• Marketing consent records: Retained until consent is withdrawn, plus a further two (2) years as an audit record.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised it may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

777xp1 uses cookies and similar tracking technologies to operate the Platform effectively and to improve your user experience. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on the 777xp1 Platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as maintaining your logged-in session, remembering your language preferences, and providing security protections. These cookies cannot be disabled without disrupting Platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymised or pseudonymised data about how users navigate the Platform — including which pages are most visited, how long sessions last, and where users encounter errors. This data helps 777xp1 identify and fix issues and improve the overall user experience.

9.3 Functional Cookies

These cookies remember your preferences and personalisation choices — such as your preferred deposit method or game lobby filter settings — so that you do not need to reconfigure them on every visit.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser's settings menu. Please note that disabling certain cookies may affect the functionality of parts of the Platform. Most modern browsers (Chrome, Firefox, Safari, Edge) include built-in cookie management tools accessible via the browser's privacy or security settings.

10 Security Measures

777xp1 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest using industry-standard algorithms
• Role-based access controls that limit employee access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated fraud and anomaly detection systems that monitor account activity in real time
• Staff data protection training and confidentiality obligations for all personnel who handle personal data
• Incident response procedures for detecting, reporting, and managing potential data breaches

Notwithstanding these measures, no system of data transmission or storage over the internet can be guaranteed to be completely secure. You also have a role to play in protecting your own account — please refer to Section 4 of our Terms & Conditions for guidance on account security best practices.

11 Your Rights

Subject to applicable law and our legitimate processing obligations, you have the following rights in respect of your personal data held by 777xp1:

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. Note that we may be required to retain certain data to comply with our legal and regulatory obligations even after account closure.
• Right to restriction of processing: You may request that we temporarily suspend the processing of your data while an accuracy dispute or objection is resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a structured, machine-readable copy of the data you provided to us.
• Right to object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. We may ask you to verify your identity before processing your request.

12 Children & Minors

The 777xp1 Platform is strictly intended for adults aged 21 years and above. 777xp1 does not knowingly collect personal data from individuals under the age of 21. Robust age verification procedures are in place at the point of registration and prior to withdrawal processing to enforce this requirement.

If 777xp1 becomes aware that personal data has been collected from an individual under the age of 21, such data will be deleted immediately, the relevant account will be closed, and any deposited funds will be returned to their source. If you believe an under-age individual has registered a 777xp1 account, please notify us immediately at [email protected].

Parents and guardians are encouraged to make use of parental control software to prevent under-age access to online gambling platforms. A range of such tools are referenced on our Responsible Gaming page.

13 Third-Party Links

The 777xp1 Platform may, from time to time, contain references to third-party websites or services for informational purposes. This Privacy Policy applies solely to the 777xp1 Platform and does not extend to any third-party websites, applications, or services that may be accessible via links on the Platform.

777xp1 has no control over and accepts no responsibility for the privacy practices, content, or data handling of any third-party websites. We encourage you to review the privacy policy of any third-party site before submitting personal information to it.

14 Changes to This Policy

777xp1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, we will provide advance notice by email to the address registered on your account, or by displaying a prominent notice on the Platform, at least fourteen (14) days before the revised policy takes effect.

The effective date at the top of this document will be updated each time this Policy is revised. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. We recommend reviewing this page periodically to stay informed of how 777xp1 protects your data.

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 777xp1 processes your personal data, please contact us:

• Email: [email protected]
• Subject line: "Privacy Enquiry" or "Data Rights Request"
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body appointed by our gaming licence authority.