This Privacy Policy explains what personal data xt777 collects when you use the platform, how it is used, who it may be shared with, how it is protected and what rights you have in relation to your data. Please read this document carefully. It forms part of the xt777 Terms and Conditions.
xt777 ("we", "us", "our", "the Platform") is committed to protecting the personal data of all individuals who interact with the xt777 website at xt777.cam. This Privacy Policy ("Policy") sets out in detail the categories of personal data we collect, the purposes for which we process it, the legal basis for processing, how long we retain it and your rights as a data subject.
This Policy applies to all users who access the Platform, including registered account holders and unregistered visitors. It applies regardless of the device or network used to access the Platform — whether you are connecting on a mobile device in Karachi, a desktop in Lahore or a tablet in Islamabad. By using the Platform you acknowledge that you have read and understood this Policy.
This Policy should be read in conjunction with the xt777 Terms and Conditions, which govern your use of the Platform more broadly.
For the purposes of this Policy, the following terms shall have the meanings given below:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person — including name, email address, IP address, device identifiers and financial data. |
| Processing | Any operation performed on personal data — including collection, storage, use, disclosure, transmission, alteration and deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data — xt777 in this context. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under a data-processing agreement. |
| Data Subject | The natural person to whom personal data relates — you, the User. |
| Consent | A freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their personal data. |
| KYC | Know Your Customer — the identity verification process required before withdrawals are processed. |
| Cookie | A small text file placed on a User's device by the Platform's web server to maintain session data, remember preferences or collect analytics. |
xt777 acts as the Data Controller in respect of the personal data collected and processed through the Platform. Questions regarding data processing, data subject rights requests and privacy complaints should be directed to the xt777 support team using the contact details set out in Section 16 of this Policy.
Where xt777 engages third-party service providers (game studios, payment processors, KYC verification providers, analytics platforms) who process personal data on its behalf, such parties act as Data Processors under written data-processing agreements that require them to handle your data only as instructed and to maintain appropriate security standards.
When you register an account on xt777 we collect:
To satisfy KYC obligations before processing withdrawals we may collect:
In connection with deposits, withdrawals and wagers we collect:
When you access the Platform we automatically collect:
If you contact xt777 support via email or live chat, we retain records of those communications including the content of messages, timestamps and any attachments submitted. This allows us to track your query through to resolution.
Where you set deposit limits, loss limits, session time reminders or request a self-exclusion, we record the limits applied, the dates on which restrictions were activated or modified, and related account-restriction history. This data is retained to ensure restrictions are honoured and to fulfil responsible gambling obligations.
We collect personal data through the following means:
We process your personal data only for specified, legitimate purposes. The table below sets out the primary processing activities, their purpose and the legal basis relied upon:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account creation & management | To establish and maintain your registered account on the Platform | Performance of contract |
| KYC / Age verification | To verify you are 18+ (or higher as applicable) and to comply with AML obligations | Legal obligation; legitimate interests |
| Payment processing | To process deposits and withdrawals in PKR and other supported currencies | Performance of contract |
| Fraud prevention & security | To detect, investigate and prevent fraudulent or abusive account activity | Legitimate interests; legal obligation |
| Responsible gambling | To record and enforce limits, cooling-off periods and self-exclusion requests | Legal obligation; legitimate interests |
| Customer support | To respond to your queries, complaints and account-assistance requests | Performance of contract; legitimate interests |
| Platform analytics | To understand how users interact with the Platform and improve user experience | Legitimate interests |
| Marketing communications | To send you promotional offers and platform updates where you have opted in | Consent |
| Regulatory compliance | To comply with applicable gaming licence conditions, AML rules and other legal requirements | Legal obligation |
We share personal data with third-party service providers who assist us in operating the Platform. These include:
We may disclose personal data to law enforcement, regulatory authorities or courts where required by applicable law, a valid legal process (court order, subpoena) or where disclosure is necessary to protect the rights, property or safety of xt777, its users or the public.
In the event of a merger, acquisition, restructuring or sale of all or part of the business, personal data held by xt777 may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and any change in the responsible Data Controller.
xt777 does not sell, rent or trade your personal data to third parties for their independent marketing or commercial purposes. Data shared with processors is shared only to the extent necessary to perform the services described above and under binding confidentiality obligations.
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations or to resolve disputes. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus a minimum of 5 years after account closure, or as required by applicable law |
| KYC / Identity documents | 5 years from account closure (or longer if required by AML / regulatory obligations) |
| Transaction & betting history | 5 years from the date of the transaction |
| Support communications | 3 years from the date of the communication |
| Responsible gambling records | Duration of account plus 5 years; self-exclusion records retained for the exclusion period plus 5 years |
| Analytics / technical logs | Up to 13 months from collection, in pseudonymised form |
| Marketing consent records | Until consent is withdrawn, plus 3 years thereafter |
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
xt777 applies industry-standard technical and organisational security measures to protect personal data from unauthorised access, accidental loss, destruction or disclosure. These include:
While we apply these measures, no internet-based system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.
xt777 uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform. A cookie is a small text file stored on your device by the Platform's web server. The following categories of cookies are used:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Maintain your login session, remember language preferences and enable core Platform functionality. Without these, the Platform cannot function correctly. | No — required for operation | |
| Remember your display preferences, game settings and responsible gambling tool configurations between sessions. | Yes — optional | |
| Collect anonymised or pseudonymised data about how users navigate the Platform — page views, session duration, device types — to help us improve user experience. | Yes — optional | |
| Track interactions with promotional content and affiliate referral sources to measure campaign effectiveness. Applied only where marketing consent has been given. | Yes — requires consent |
On your first visit to xt777.cam you will be presented with a cookie preference notice. Essential cookies are applied automatically. Functional, analytics and marketing cookies require your consent before being set. You may withdraw or modify your cookie preferences at any time via your browser settings or the Platform's cookie management tool.
You can configure your browser to refuse some or all cookies, or to alert you when a cookie is being set. Be aware that disabling essential cookies will impair or prevent your ability to use the Platform. Most browsers — including those common on Pakistani Android devices — provide accessible cookie management options under Settings → Privacy.
Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data. To exercise any of these rights, contact xt777 support using the details in Section 16.
You have the right to request confirmation of whether xt777 processes personal data about you and, if so, to receive a copy of that data and information about how it is being used.
If personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
In certain circumstances you may request the deletion of your personal data — for example, where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to overriding legal retention obligations such as AML record-keeping requirements.
You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests.
Where processing is based on consent or the performance of a contract and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, machine-readable format.
You have the right to object to processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for marketing purposes. If you object to marketing, we will cease all direct marketing activities in relation to you.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing conducted before withdrawal.
If you believe your data rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to your circumstances. xt777 would appreciate the opportunity to address your concerns directly before you escalate to a supervisory authority — please contact us first.
xt777 is strictly an adults-only platform. The Platform is not directed at individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from minors.
Where we discover or have reasonable grounds to believe that a registered user was below the applicable minimum age at the time of registration, we will immediately suspend the account, void associated wagers and winnings, and delete the personal data of the minor, subject to any overriding legal obligations that require us to retain certain records.
If you have reason to believe that a minor has registered on xt777, please contact us immediately at the details provided in Section 16.
xt777 operates internationally, and your personal data may be transferred to, stored in and processed in countries other than Pakistan. This includes the jurisdiction in which the Platform's servers are hosted and the countries in which our third-party service providers operate.
Where personal data is transferred outside the country in which it was collected, we take steps to ensure that appropriate safeguards are in place — such as data-processing agreements incorporating standard contractual clauses or equivalent protections — to maintain the level of protection that this Policy describes.
The Platform may reference third-party payment providers and services in contextual descriptions (for example, Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah as familiar Pakistan payment references). Where the Platform integrates with third-party services — such as payment gateways or KYC verification portals — those services operate under their own privacy policies.
xt777 is not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party service with which you interact in connection with your xt777 account.
xt777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations or Platform features. The effective date at the top of this page will be updated to reflect the date of the most recent revision.
Where a change is material — for example, a significant change in the categories of data collected or the purposes for which it is used — we will endeavour to notify registered users via the Platform or by email to the registered address on file. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of that revised Policy.
For all privacy-related enquiries, data subject rights requests, consent withdrawal, data breach reports or complaints regarding this Policy, please contact the xt777 support team:
Six commitments that underpin xt777's approach to data privacy — applied consistently for every user, wherever in Pakistan they're connecting from.
All data transmitted between your device and xt777's servers is protected by TLS/HTTPS encryption. Sensitive stored data — including hashed passwords and KYC documents — is protected with encryption at rest.
xt777 does not sell, rent or trade your personal data to third parties for their independent marketing or commercial use. Your information is shared only with processors necessary to operate the Platform, under binding agreements.
Access, rectification, erasure, portability and objection rights are not just listed — they can be exercised by contacting support. Requests are handled within 30 days and identity is verified before sensitive actions.
We don't hold data indefinitely. Retention periods are defined by category — most account data is deleted or anonymised within 5 years of account closure, subject to legal obligations such as AML record-keeping.
Only essential cookies run without your consent. Analytics, functional and marketing cookies are applied only after you opt in. You can adjust cookie preferences at any time via your browser settings.
Identity documents submitted for KYC are handled by verified third-party verification providers under data-processing agreements. Full document data is not retained beyond the legally required period after account closure.
If this Policy raises any questions, or if you want to exercise a data right, the support team is available around the clock. You can also review the full Terms and Conditions or visit the homepage to explore the Platform.