XC777 Privacy Policy – Pakistan Player Data

XC777 is an online gaming platform serving players in Pakistan. For the purposes of data protection, xc777 acts as the data controller — meaning we determine why and how your personal data is processed. Our registered operational contact for all privacy matters is:

XC777 collects only the personal data that is genuinely necessary to operate your account, process payments, comply with regulatory requirements, and deliver a functioning gaming experience. Here is a clear breakdown:

XC777 uses personal data for specific, limited, and clearly defined purposes. We do not use your data for purposes beyond what is listed here without seeking your explicit consent first.

• Account creation and management: Your identity and contact details are used to create and maintain your xc777 player account, authenticate you at login, and communicate account-related notifications such as deposit confirmations, withdrawal processing updates, and security alerts.
• Payment processing: Tokenised payment references are used to process deposits and withdrawals through our payment partners. XC777 uses this data to match incoming deposits to the correct account and verify the ownership of withdrawal destinations.
• KYC and AML compliance: Identity documents and CNIC data are used to verify your age and identity in compliance with anti-money laundering (AML) and Know Your Customer (KYC) regulatory obligations. This is a legal requirement, not optional.
• Responsible gaming: Gameplay data including session durations, bet sizes, loss patterns, and frequency of play is used by xc777's responsible gaming system to identify players who may be at risk of problem gambling and to enforce player-set limits.
• Platform improvement: Aggregated, anonymised gameplay and technical data is used to improve xc777's platform performance, game selection, and user experience. This analysis never involves identifying individual players.
• Security and fraud prevention: IP addresses, device fingerprints, and session data are used to detect suspicious account activity, prevent unauthorised access, identify multi-accounting, and investigate fraud claims.
• Customer support: Communication records are used to resolve support queries, track complaint progress, and ensure consistent service quality. Support transcripts are retained for quality assurance and dispute resolution purposes.
• Promotional communications: If you have opted in to marketing communications, your contact details are used to send bonus offers, tournament announcements, and relevant platform updates. You can opt out at any time.

Every use of your personal data at xc777 is grounded in one of the following legal bases:

• Contractual necessity: Processing required to fulfil the xc777 player agreement — account creation, payment processing, gameplay delivery, and withdrawal processing. Without this processing, xc777 cannot provide you with services.
• Legal obligation: Processing required to comply with applicable laws — KYC identity verification, AML transaction monitoring, and regulatory reporting. XC777 cannot waive these obligations regardless of player preference.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming analysis, and platform improvement where xc777's interests do not override your rights and freedoms. We conduct a balancing test before relying on this basis.
• Consent: Processing for optional purposes — marketing communications. Consent is sought explicitly, is freely given, and can be withdrawn at any time without affecting your account status or service access at xc777.

XC777 does not sell, rent, or trade your personal data. We share data only in the following strictly limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive only the transaction data required to process your specific payment. They do not receive gameplay data, game history, or any information beyond what is necessary for the payment itself.
• KYC verification partners: Identity document data may be processed by a certified third-party KYC verification provider for the purpose of automated identity matching and fraud screening. These providers operate under strict data processing agreements with xc777 and cannot use your data for any other purpose.
• Game providers: Third-party game studios (Pragmatic Play, Spribe, JILI, and others) receive only a pseudonymous player identifier and the information required to run the specific game session — typically a session token and bet amount. They do not receive your real name, mobile number, or payment details.
• Legal and regulatory authorities: XC777 will disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so. We will only disclose the minimum data necessary to comply with any specific lawful request, and we will notify you where permitted by law.
• Professional advisors: Legal counsel, auditors, and compliance advisors may access limited data under strict confidentiality obligations when necessary to provide their professional services to xc777.

XC777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

After the applicable retention period expires, xc777 securely destroys or anonymises the data in question. Anonymised data that can no longer be linked to any individual may be retained indefinitely for aggregate statistical purposes.

As an xc777 player, you have meaningful rights over your personal data. These rights are not conditional on your account status and can be exercised at any time by contacting support@xc777.im:

XC777 uses cookies and similar technologies to operate the platform. A cookie is a small text file stored on your device when you visit a website. Here is exactly what xc777 uses and why:

XC777 does not place advertising cookies, social media tracking pixels, or third-party retargeting cookies on your device. You can manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent the xc777 platform from functioning correctly.

XC777 implements a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data stored on xc777 servers is encrypted using AES-256. All data transmitted between your browser and xc777 uses TLS 1.3 — the strongest widely-deployed transport encryption standard currently available.
• Password security: Your xc777 password is hashed using bcrypt with a per-user salt. XC777 staff cannot see your password — only a one-way cryptographic hash. This means even in the event of a data breach, your raw password is not exposed.
• Access control: Personal data access within xc777 is governed by strict role-based permissions. Support staff can access only the minimum data required to resolve your query. Engineering staff have no routine access to production player data.
• Two-factor authentication: XC777 provides optional two-factor authentication (2FA) for all player accounts. We strongly recommend enabling 2FA to add an additional layer of security beyond your password.
• Penetration testing: XC777 commissions independent security audits and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident response: XC777 maintains a formal security incident response plan. In the event of a data breach affecting player personal data, we will notify affected players and relevant authorities within the timeframes required by applicable regulations.

XC777 is strictly an 18+ platform. We do not knowingly collect personal data from any person under the age of 18. Our registration process includes an age declaration, and we conduct KYC age verification for withdrawals. If xc777 discovers that a person under 18 has registered an account, we will immediately close the account, return any unplayed deposits (excluding bonus funds), and securely delete all personal data associated with the account.

If you believe a minor has registered an account at xc777, please contact support@xc777.im immediately. We will investigate and act within 24 hours of a credible report.

XC777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform functionality. When we make changes:

• The updated policy will be published at xc777.im/privacy-policy with a revised "Last Updated" date.
• For material changes — those that significantly affect how we use your data or your rights — we will send an advance notice to your registered email address or display a prominent in-platform notification before the changes take effect.
• Your continued use of xc777 after the effective date of updated policy constitutes your acknowledgement of the changes.
• If you disagree with a material change, you may close your account and withdraw any remaining real-money balance before the effective date. Contact xc777 support to initiate account closure.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how xc777 has handled your personal information, please get in touch:

XC777 will acknowledge all privacy-related emails within 48 hours and respond fully within 30 days. If you are not satisfied with our response, you have the right to escalate to the appropriate data protection authority or pursue independent dispute resolution as outlined in our Terms and Conditions.