x1777 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how x1777 ("x1777," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the x1777 online casino and sports betting platform, including the website at x1777.org and any associated mobile or web applications (collectively, the "Platform").

x1777 is committed to handling your personal information responsibly, transparently, and in compliance with internationally recognised data protection principles. We serve players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond — and we recognise that our players place significant trust in us when they share their personal and financial information.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference and together form the complete framework governing your relationship with x1777.

2 Data Controller

For the purposes of applicable data protection legislation, x1777 acts as the data controller in respect of the personal data processed through the Platform. As data controller, x1777 determines the purposes and means by which your personal data is processed.

Where x1777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or fraud detection services — those providers act as data processors under documented contractual arrangements that require them to protect your data to the same standard that x1777 applies.

Any questions, requests, or complaints relating to the processing of your personal data by x1777 should be directed to our Data Protection contact, details of which are provided in Section 15 of this Policy.

3 Data We Collect

x1777 collects personal data through multiple touchpoints during the course of your relationship with the Platform. The categories of data we collect are as follows:

x1777 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly necessary for identity verification purposes as part of our KYC obligations.

4 How We Use Your Data

x1777 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your x1777 player account, including processing registration, verifying your identity, and enabling you to access the Platform's gaming and betting services.
• Transaction Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other supported payment methods, and to maintain accurate financial records of all transactions conducted on your account.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and Know Your Customer (KYC) regulations, including verifying your identity, monitoring transactions for suspicious activity, and reporting to relevant authorities where legally required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multiple account registration, bonus abuse, and any other conduct that threatens the integrity of the Platform or the interests of our player community.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where appropriate.
• Customer Support: To respond to your enquiries, process complaints, and improve the quality of our support services based on interaction history.
• Marketing Communications: Where you have given your explicit consent, to send you promotional offers, bonus notifications, and platform updates via SMS, email, or in-app notification. You may withdraw marketing consent at any time through your account settings.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve Platform performance, game selection, user experience, and customer service quality.

5 Legal Basis for Processing

x1777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and x1777 — specifically, operating your player account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing that is required to comply with applicable laws, including AML/CFT regulations, KYC obligations, tax reporting requirements, and regulatory directives from licensing authorities.
• Legitimate Interests: Processing carried out on the basis of x1777's legitimate business interests, including fraud prevention, platform security, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — most notably in respect of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

x1777 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and card processing partners require transaction data to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services that assist x1777 in confirming the identity and age of players, including document verification and liveness check providers.
• Fraud & AML Detection Services: Technology providers that assist x1777 in identifying suspicious transaction patterns and potential money laundering activity.
• Gaming Software Providers: Game developers and live casino studios whose products are hosted on the x1777 Platform may receive the minimum data necessary to facilitate game play and resolve disputes.
• Regulatory Authorities: x1777 may be legally required to disclose player data to gaming regulators, financial intelligence units, law enforcement agencies, or tax authorities. Such disclosures will always be made in strict compliance with applicable legal requirements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

All third-party data processors engaged by x1777 are required to process personal data solely in accordance with x1777's documented instructions and to implement appropriate technical and organisational security measures.

7 International Transfers

Given that x1777 operates under an international gaming licence and engages technology and service providers from multiple jurisdictions, your personal data may be transferred to and processed in countries outside Pakistan. Such countries may not have data protection laws equivalent to those applicable in your home jurisdiction.

Where personal data is transferred internationally, x1777 ensures that appropriate safeguards are in place, which may include:

• Entering into standard contractual clauses with the receiving entity that impose data protection obligations consistent with internationally recognised standards;
• Ensuring that the receiving entity operates within a jurisdiction recognised as providing an adequate level of data protection;
• Implementing supplementary technical and organisational measures where necessary to ensure that transferred data receives equivalent protection.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting x1777 using the details in Section 15.

8 Data Retention

x1777 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as x1777 is legally obligated to retain it. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account's existence on the Platform.
• Closed Account Data: Following account closure, x1777 retains identity, financial, and gaming activity data for a minimum period of five (5) years to comply with AML, KYC, and applicable regulatory record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your relationship with x1777 and for a reasonable period thereafter as evidence of lawful processing.
• Support Communications: Customer support interaction records are retained for a period of three (3) years following the resolution of the relevant matter.

When personal data is no longer required and no legal obligation requires its retention, x1777 will securely delete or irreversibly anonymise it.

9 Cookies & Tracking Technologies

x1777 uses cookies and similar tracking technologies on the Platform to enhance user experience, maintain session security, and analyse Platform performance. The categories of cookies used are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as secure login session management, shopping cart functionality, and access to restricted areas of the Platform. These cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: These cookies collect anonymised information about how players interact with the Platform, including which pages are visited most frequently and how players navigate between sections. This data is used to improve Platform performance and user experience.
• Functional Cookies: These cookies remember your preferences — such as language settings, responsible gaming limit configurations, and notification preferences — so that you do not need to re-enter them on each visit.
• Security Cookies: These cookies assist in fraud detection and prevention by identifying unusual access patterns or suspicious device behaviour associated with your account.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the x1777 Platform.

10 Your Rights

As an x1777 player, you hold the following rights in respect of your personal data. x1777 is committed to facilitating the exercise of these rights promptly and without undue restriction: