777xc Privacy Policy

1Introduction and Data Controller

1.1 This Privacy Policy is issued by 777xc (hereinafter "777xc," "we," "us," or "our"), the operator of the online gaming platform accessible at 777xc.bio. 777xc operates under an international online gaming license which imposes obligations on the Company in respect of data protection, security, and regulatory reporting.

1.2 For the purposes of applicable data protection law, 777xc acts as the data controller in respect of the personal data of registered players and platform visitors. This means that 777xc determines the purposes and means by which personal data is processed.

1.3 This Policy applies to personal data collected through: the 777xc website (777xc.bio); the account registration and KYC verification process; the deposit and withdrawal payment processing workflow; customer support interactions via email and live chat; and any cookies, analytics tools, or tracking technologies deployed on the platform.

1.4 This Policy should be read alongside the 777xc Terms and Conditions and the Responsible Gaming Policy. Where there is any conflict between this Policy and those documents on a data protection matter, this Privacy Policy shall prevail.

2Personal Data We Collect

2.1 777xc collects personal data in the following categories. Not all categories apply to all players — the specific data collected depends on the services you use and the stage of your account lifecycle.

2.2 777xc does not collect or process special categories of personal data (such as health or biometric data) except where strictly required by KYC obligations — for example, a facial photograph on a government-issued identity document submitted for age and identity verification. Such document images are processed solely for KYC purposes and are not retained beyond what the regulatory obligation requires.

3How We Collect Personal Data

3.1 777xc collects personal data through the following channels:

• Directly from you: Information you voluntarily provide during account registration, KYC document submission, payment transactions, form completions, and support communications;
• Automatically during platform use: Technical data, session data, gameplay activity, and device information collected through the platform's standard operation, server logs, and cookies/tracking technologies;
• From payment service providers: Transaction confirmation data, payment method verification data, and fraud signals from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with deposit and withdrawal processing;
• From KYC and identity verification service providers: Verification outcomes, document authenticity assessments, and watchlist screening results processed through third-party KYC tools engaged by 777xc;
• From fraud detection systems: Device fingerprint data, IP reputation data, and behavioural analytics generated by fraud prevention tools deployed across the platform.

4Purposes and Legal Basis for Processing

4.1 777xc processes personal data for specific purposes, each of which is supported by a legal basis under applicable data protection principles. The primary purposes are set out in the table below:

5Cookies and Tracking Technologies

5.1 The 777xc platform uses cookies — small text files stored on your device — and related tracking technologies to operate key platform functions and to understand how players interact with the platform. The types of cookies deployed by 777xc are as follows:

Essential / Session Cookies

These cookies are strictly necessary for the 777xc platform to function. They maintain your login session so you remain authenticated as you navigate between pages, store your language and display preferences, and ensure the security of your active session. These cookies cannot be disabled without fundamentally impairing your ability to use the platform.

Functional Cookies

Functional cookies remember choices you have made — for example, your preferred currency display, recently played games, or live chat widget status — to personalise your experience on return visits. These cookies do not track your behaviour across third-party websites.

Analytics Cookies

Analytics tools (deployed without linking data to identifiable individuals) help 777xc understand aggregate platform usage patterns — which game categories are most visited, at what time of day peak traffic occurs (useful for scheduling live dealer table availability for Pakistani peak hours), and where players experience navigation difficulties. Analytics data is used internally to improve platform design and is not shared with advertisers.

Fraud Prevention and Security Cookies

Cookies used by 777xc's fraud detection infrastructure help identify suspicious login attempts, bot activity, and unusual betting patterns. These cookies form part of the security architecture mandated by the 777xc gaming license and cannot be disabled.

5.2 You may adjust your browser settings to decline non-essential cookies at any time. Most modern browsers — including Chrome and Safari, the most common browsers used by Pakistani 777xc players — provide controls for cookie management under Settings → Privacy. Please note that declining essential cookies will prevent normal use of the platform.

6Sharing Personal Data with Third Parties

6.1 777xc does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes under any circumstances.

6.2 777xc shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — receive the minimum personal and financial data necessary to authenticate, process, and confirm deposit and withdrawal transactions. Each provider operates under its own privacy and data protection policies and is subject to Pakistani financial regulatory oversight;
• KYC and Identity Verification Providers: Third-party services engaged to verify identity documents (CNIC, passport) and screen against sanctions and politically exposed persons (PEP) watchlists as required by anti-money laundering obligations under the gaming license. These providers process document data solely for verification and are bound by strict data processing agreements with 777xc;
• Technology and Infrastructure Providers: Cloud hosting, platform software, and database services that form the technical backbone of the 777xc platform. All such providers are contractually bound as data processors and may not use 777xc player data for any purpose beyond providing the contracted technical service;
• Fraud Detection and Security Services: Specialist fraud prevention and cybersecurity providers that help protect the platform against unauthorised access, account takeover attacks, and money laundering activity. Data shared with these providers is processed solely for security and fraud prevention purposes;
• Regulatory and Legal Authorities: The gaming license regulatory authority, financial intelligence units, law enforcement agencies, and courts — where disclosure is required by the Company's regulatory obligations, applicable law, or a valid legal order. 777xc will notify affected players of such disclosures where legally permissible to do so;
• Professional Advisers: Legal counsel, auditors, and compliance consultants who are bound by professional duties of confidentiality and who access player data only where necessary to provide advisory services to 777xc.

7International Data Transfers

7.1 Given that 777xc operates under an international gaming license and engages technology, KYC, and fraud prevention service providers based in multiple jurisdictions, your personal data may be transferred to and processed in countries outside Pakistan. Such countries may have data protection laws that differ from those in Pakistan.

7.2 Where personal data is transferred to a third country, 777xc implements appropriate safeguards to ensure that the transferred data continues to receive an adequate level of protection. These safeguards include contractual data processing agreements that impose data protection obligations on the recipient entity equivalent to those applicable within the 777xc operating framework.

7.3 KYC document data (CNIC copies, passport scans) submitted for identity verification may be processed by 777xc's KYC provider in a jurisdiction outside Pakistan. 777xc's contracts with such providers mandate that document data be used solely for verification purposes, retained only for the period required to complete verification, and deleted in accordance with a defined retention schedule.

8Data Retention

8.1 777xc retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by the regulatory obligations imposed by our international gaming license and applicable law. The key retention periods are as follows:

8.2 At the end of the applicable retention period, personal data is either securely deleted or anonymised such that the data can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.

9Data Security

9.1 777xc implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and 777xc's platform infrastructure — the same standard employed by Pakistani commercial banks including HBL and Meezan Bank for their internet banking portals;
• Encryption at rest for all stored personal data, including KYC documents and financial transaction records, using industry-standard encryption protocols;
• Access controls that restrict access to personal data strictly to 777xc personnel and contracted service providers who require the data to perform their defined function. All such access is logged and auditable;
• Two-factor authentication requirements for all internal 777xc systems that contain personal player data;
• Regular independent security audits of platform infrastructure and data handling processes, as required under the terms of the 777xc gaming license;
• Fraud detection and intrusion monitoring systems that operate continuously to identify and respond to unusual access patterns or security events in real time.

9.2 Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data security incident that is likely to result in significant risk to affected players' rights, 777xc will notify affected players and the relevant regulatory authority in accordance with applicable breach notification obligations.

9.3 Players are responsible for maintaining the security of their own 777xc account credentials. 777xc will never ask you for your password under any circumstances. If you suspect your account credentials have been compromised, you should change your password immediately and notify 777xc support at [email protected] without delay.

10Your Rights Over Your Personal Data

10.1 As a data subject, you hold the following rights in respect of the personal data that 777xc holds about you. These rights may be exercised by submitting a request to [email protected]. 777xc will respond to all valid data rights requests within 30 calendar days of receipt:

11Marketing Communications

11.1 777xc may send promotional emails, SMS notifications to your registered Pakistani mobile number, and in-platform notifications about bonus offers, new game launches, cricket betting promotions (including PSL-specific offers), and other platform news to registered players who have opted in to receive such communications.

11.2 Marketing communications will only be sent to players who have provided explicit consent to receive them. You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link in any 777xc marketing email;
• Updating your communication preferences in your 777xc account settings;
• Emailing a withdrawal request to [email protected].

11.3 Players who have activated self-exclusion on their 777xc account will be removed from all marketing communication lists for the full duration of the self-exclusion period. Marketing will not resume without the player's explicit re-opt-in following the conclusion of a temporary self-exclusion, or at all in the case of a permanent self-exclusion.

11.4 Transactional communications — including deposit confirmations, withdrawal status notifications, account security alerts, and KYC status updates — are not marketing communications and will continue to be sent regardless of your marketing consent settings, as they are necessary for the operation of your account.

12Children and Minors

12.1 The 777xc platform is strictly intended for adults aged 21 years and above. 777xc does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

12.2 All accounts are subject to age verification through the KYC process. Any account found to be held by an individual under 21 will be closed immediately. Any personal data collected in connection with such an account will be deleted except to the extent that retention is required by anti-money laundering or regulatory obligations.

12.3 If a parent or guardian becomes aware that a minor under their supervision has accessed the 777xc platform or submitted personal data without authorisation, they should contact 777xc support at [email protected] immediately. 777xc will investigate the matter and take appropriate action promptly.

13Responsible Gaming and Data Processing

13.1 As part of its responsible gaming obligations under the international gaming license, 777xc processes certain personal data — specifically account activity data and behavioural patterns — for the purpose of identifying and supporting players who may be at risk of developing harmful gambling behaviour.

13.2 This processing may involve automated analysis of betting patterns, session frequencies, changes in deposit levels, and ratio of wins to losses. Where such analysis identifies patterns indicative of potential problem gambling, 777xc may send responsible gaming information to the affected player, proactively offer to discuss responsible gaming tools, or in serious cases take protective action on the account in accordance with its responsible gaming obligations.

13.3 Responsible gaming data — including self-exclusion status and limit settings — is handled with strict confidentiality. This data will not be shared with marketing teams within 777xc and will not be used for promotional targeting.

13.4 Players who have activated self-exclusion are retained on 777xc's self-exclusion records for the full duration of the exclusion period plus the regulatory retention period that follows. This ensures that re-registration attempts during an active exclusion period can be identified and blocked.

13.5 Full details of 777xc's responsible gaming tools and policies are available on the Responsible Gaming page.

14Amendments to This Privacy Policy

14.1 777xc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes required by updates to our gaming license obligations, or changes in applicable data protection law.

14.2 Where changes are material — for example, where we introduce a new category of data processing or share data with a new category of third party — we will notify registered players by email to their registered address prior to the change taking effect.

14.3 The date at the top of this Policy reflects the most recent revision date. Players are encouraged to review this Policy periodically. Continued use of the 777xc platform following publication of an updated Policy constitutes acceptance of the revised terms.

15Contact, Complaints, and Data Protection Queries

15.1 For any queries, concerns, or requests related to this Privacy Policy or 777xc's data processing practices, please contact the 777xc data protection team:

• Email: [email protected]
• Subject Line (for data requests): "Data Rights Request" or "Privacy Query"
• Response Time: Acknowledgement within 48 hours; substantive response within 30 calendar days
• Languages: English and Urdu
• Support Hours: 24 hours a day, 7 days a week

15.2 If you have submitted a data rights request or privacy complaint and are not satisfied with the response you have received from 777xc, you may escalate the matter to the data protection supervisory authority in the jurisdiction of 777xc's gaming license, or to the independent dispute resolution mechanism designated under the gaming license framework. 777xc support will provide the relevant escalation contact details upon request.

15.3 This Privacy Policy was last reviewed and updated on 1 January 2026. 777xc commits to reviewing this Policy at least annually to ensure it remains accurate, complete, and consistent with the Company's current data processing practices and regulatory obligations.