xk777 Privacy Policy

This Privacy Policy ("Policy") applies to all users of the xk777 platform, accessible at xk777.vu, including registered members, visitors who browse the platform without a registered account, and any person who interacts with xk777 customer support.

xk777 ("we", "us", "our", or "the Platform") recognises that your personal data belongs to you and that you have a right to understand exactly how it is used. This Policy is written in plain language where possible, while maintaining the legal precision required of a binding data protection document.

By accessing or using xk777 — including registering an account, placing a bet, playing a game, making a deposit, or contacting support — you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read together with the xk777 Terms & Conditions.

The data controller responsible for the personal data of xk777 members and users is the legal entity operating the xk777 platform under its international gaming licence. xk777 operates in accordance with the data protection obligations imposed by its licensing jurisdiction and applicable international standards.

Questions or requests relating to data protection, including requests to exercise any of the rights described in Section 10 of this Policy, should be submitted to xk777 via the contact channels listed in Section 14. xk777 will acknowledge data-related requests within 5 business days and aim to resolve them within 30 calendar days.

xk777 collects personal data that falls into the following categories:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identification document details (such as CNIC number or passport number). This data is collected during account registration and the KYC (Know Your Customer) verification process.
• Contact Data: Email address, mobile telephone number, and residential address. Used for account communications, security alerts, and customer support.
• Financial Data: Deposit and withdrawal transaction records, payment method details (JazzCash account numbers, EasyPaisa wallet identifiers, bank account details for HBL, UBL, Meezan Bank, and Raast transfers), and PKR transaction amounts. Full payment credentials are handled directly by regulated payment processors and are not stored on xk777 servers.
• Account & Activity Data: Login timestamps, session durations, games played, bets placed, wagers won and lost, bonus claims, deposit frequencies, and withdrawal requests. This data forms your account transaction history.
• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and referral source. Collected automatically when you access the xk777 platform.
• Communication Data: Records of live chat conversations, email correspondence, and any feedback or complaint submissions made to xk777 support.
• Responsible Gaming Data: Deposit limit settings, session time preferences, cool-off periods, and self-exclusion status. This data is used exclusively for player protection purposes.

xk777 collects personal data through the following mechanisms:

• Direct Submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Data collected automatically as a result of your interaction with the xk777 platform, including cookies, server logs, and session tracking technologies. See Section 9 for full details.
• Third-Party Sources: Identity and fraud screening data received from regulated third-party KYC verification providers, fraud prevention databases, and payment processors. This data supplements the information you provide directly and is used solely for verification and compliance purposes.
• Responsible Gaming Monitoring: Behavioural signals derived from your account activity that are analysed internally by xk777 to identify indicators of problem gambling. This analysis is performed on the basis of xk777's legitimate interest in protecting its members.

xk777 processes your personal data for the following purposes, each supported by a corresponding lawful basis:

• Account Creation & Management — Necessary for the performance of the contract between xk777 and the member.
• Identity Verification (KYC) — Required for compliance with anti-money laundering (AML) and fraud prevention obligations; legal obligation basis.
• Processing Deposits & Withdrawals in PKR — Contractual necessity; required to fulfil the member's banking requests.
• Providing Casino Games & Sports Betting Services — Contractual performance.
• Customer Support — Contractual necessity and legitimate interest in resolving member issues efficiently.
• Fraud Detection & Platform Security — Legitimate interest in protecting the platform, other members, and financial systems from abuse.
• Responsible Gaming Monitoring — Legitimate interest in the protection and welfare of members.
• Marketing & Promotions — Consent basis only. Members may opt out of promotional communications at any time through account settings or by contacting support.
• Regulatory Reporting & Record-Keeping — Legal obligation under applicable gaming licensing and AML regulations.

xk777 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, and banking partners (HBL, UBL, Meezan Bank) receive only the transactional data necessary to process your deposit or withdrawal request.
• KYC & Identity Verification Providers: Regulated third-party verification services receive your identity documents and personal details for the purpose of confirming your identity as required by AML regulations. These providers are contractually bound to use your data only for verification purposes.
• Game Software Providers: Game studios whose titles appear in the xk777 lobby may receive anonymised session data (bet amounts, game identifiers, session outcomes) to support game functionality. These providers do not receive personally identifiable information.
• Regulatory & Law Enforcement Authorities: xk777 will disclose member data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, without requiring prior consent from the member.
• Fraud Prevention Databases: Where fraud indicators are detected, relevant data may be reported to shared fraud prevention databases operated under applicable regulatory frameworks.

All third parties with whom xk777 shares personal data are required to process that data in accordance with applicable data protection standards and may not use it for any purpose beyond that for which it was shared.

As a platform operating under an international gaming licence and serving members across Pakistan, xk777 may transfer personal data to servers, processors, and service providers located in jurisdictions outside Pakistan. Such transfers may include countries in Asia-Pacific, Europe, or other regions where xk777's technology and service partners are based.

Where personal data is transferred internationally, xk777 applies appropriate safeguards to protect the data during transit and storage. These safeguards include contractual data protection obligations imposed on all recipients and, where available, reliance on recognised adequacy frameworks.

xk777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. Specific retention periods are as follows:

• Account & Identity Data: Retained for the duration of your membership and for a minimum of 5 years following account closure, as required by AML and gaming licensing regulations.
• Transaction Records: Financial transaction records, including PKR deposits and withdrawals, are retained for a minimum of 5 years from the date of each transaction.
• Communication Records: Customer support correspondence is retained for 2 years from the date of the communication, or longer where a complaint or dispute is ongoing.
• Technical & Log Data: Server logs and IP address records are retained for up to 12 months for security and fraud investigation purposes.
• Responsible Gaming Data: Self-exclusion records are retained for the duration of the exclusion period and for a minimum of 5 years thereafter.
• Marketing Preferences: Opt-out records are retained indefinitely to ensure that previously expressed preferences are respected.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with xk777's data destruction procedures.

xk777 uses cookies and similar tracking technologies to operate the platform, maintain session security, analyse user behaviour, and prevent fraud. The following table describes the categories of cookies in use on xk777:

You can manage or decline non-essential cookies through your browser settings. Please note that disabling essential cookies may impair your ability to log in to or use the xk777 platform. xk777 does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

Subject to applicable legal obligations and the terms of xk777's gaming licence, you have the following rights with respect to your personal data held by xk777:

To exercise any of the above rights, contact xk777 via live chat or email at [email protected]. xk777 will respond within 30 calendar days. In some cases, particularly for erasure requests, xk777's legal retention obligations under its gaming licence and AML regulations may limit the extent to which data can be deleted.

xk777 implements a layered approach to data security. The following technical and organisational measures are in place to protect your personal data:

• Encryption in Transit: All data transmitted between your device and xk777 servers is encrypted using TLS 1.3 protocol. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields including identity document details and financial records are encrypted at the database level using AES-256 encryption.
• Access Controls: Access to production systems and member data is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular review.
• Two-Factor Authentication: Members are strongly encouraged to enable 2FA on their xk777 accounts. Staff access to member data systems requires mandatory multi-factor authentication.
• Regular Security Audits: xk777 engages independent security professionals to conduct penetration testing and vulnerability assessments on a scheduled basis.
• Incident Response: xk777 maintains a data breach response procedure. In the event of a security incident affecting member data, xk777 will notify affected members promptly and take all reasonable steps to contain and remediate the breach.

While xk777 takes data security very seriously, no online platform can guarantee absolute security. Members are responsible for maintaining the security of their own account credentials and should report any suspected unauthorised access to xk777 support immediately.

The xk777 platform is strictly for users aged 21 years and above. xk777 does not knowingly collect or process personal data belonging to individuals under the age of 21. The platform employs age verification procedures during account registration and reserves the right to request identity documents to confirm member ages at any time.

If xk777 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted and the associated account will be closed immediately. Any balance in such an account will be handled in accordance with xk777's Terms and applicable regulatory requirements.

Parents and guardians who believe that a minor may have registered on the xk777 platform should contact xk777 support via live chat immediately so that the matter can be investigated and resolved without delay.

xk777 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, applicable law, regulatory requirements, or data processing practices. When material changes are made, xk777 will notify registered members via email to their registered address and/or via an in-platform notification at least 14 days before the changes take effect.

The current version of this Policy is always accessible at xk777.vu/privacy-policy. The effective date at the top of this document indicates when this version became active.

Continued use of the xk777 platform following the effective date of any update constitutes your acceptance of the revised Policy. If you object to any material changes, your sole remedy is to close your xk777 account. You may request a copy of any previous version of this Policy by contacting xk777 support.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or need to submit a data protection query or complaint, you may contact xk777 via the following channels:

• Live Chat: Available 24/7 via the chat icon on the xk777 platform. Support in English and Urdu.
• Email: [email protected] (plain text — not a clickable link). Data protection requests should include "DATA REQUEST" in the subject line.
• Related Policies: See also the Terms & Conditions and Responsible Gaming pages for additional policy information.