777xp7 Privacy Policy
Your Data, Your Rights

1.1 This Privacy Policy applies to all personal data processed by 777xp7 in connection with the operation of the website at https://777xp7.app, its associated mobile-optimised interface, and all services provided thereunder (collectively, the "Platform").

1.2 By registering an Account or using any part of the 777xp7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the Platform.

1.3 This Policy is to be read alongside the 777xp7 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 777xp7.

1.4 This Privacy Policy is directed at Pakistani players and users who access 777xp7 from within Pakistan or who have provided Pakistani contact details, payment methods (such as JazzCash, EasyPaisa, HBL, or UBL), or identification documents issued by Pakistani authorities.

2.1 For the purposes of this Privacy Policy, the data controller is the operator of 777xp7, being the entity that holds the international gaming licence under which the Platform operates. The data controller determines the purposes and means of processing your personal data.

2.2 All data protection enquiries, access requests, and complaints relating to the 777xp7 Privacy Policy should be directed to our dedicated Data Protection team. Contact details are provided in Clause 15 of this Policy.

2.3 Where 777xp7 engages third-party service providers to process data on its behalf — such as payment processors, KYC verification providers, or game platform providers — those parties act as data processors operating under binding data processing agreements that require them to maintain standards consistent with this Policy.

3.1 777xp7 collects personal data from you directly (when you register, make deposits, contact support) and automatically (through the Platform's technical infrastructure). The categories of personal data we collect are set out below.

• Full legal name (as it appears on your Pakistani CNIC or passport)
• Date of birth (for 21+ age verification purposes)
• Pakistani CNIC number or passport number
• Residential address (city, province, postal code — e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Email address and mobile phone number
• Account username and encrypted password

• JazzCash or EasyPaisa mobile wallet identifiers
• Bank account details (HBL, UBL, Meezan Bank, or other Pakistani bank accounts used for deposits or withdrawals)
• Raast payment ID where applicable
• Debit card details (card type, last four digits, expiry date — full card numbers are never stored by 777xp7)
• Deposit and withdrawal transaction history, including amounts in PKR, timestamps, and payment method used
• Bonus and promotional credits claimed and wagered

• Scanned or photographed copy of Pakistani CNIC (front and back), passport, or other government-issued identification
• Proof of residential address (utility bill, bank statement, or similar document, not older than three months)
• Selfie or live photograph for facial verification purposes, where required by our KYC provider

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser type/version
• Session duration, pages visited, game titles accessed, and betting history
• Clickstream data and navigation patterns within the Platform
• Login timestamps and logout events

• Records of live chat, email, or support ticket correspondence with the 777xp7 team
• Survey responses, feedback submissions, and promotional opt-in records

4.1 777xp7 processes personal data only for defined, lawful purposes. The table below summarises the primary purposes for which we use your data and the corresponding legal basis for each activity.

4.2 777xp7 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required by AML or fraud prevention systems. Where automated decisions are made, you have the right to request human review as described in Clause 10.

5.1 Contract Performance. The majority of data processing carried out by 777xp7 is necessary for the performance of the contract between you and 777xp7 — namely, the provision of the online gaming and sports betting services you have requested. Without processing your identity, financial, and account data, 777xp7 cannot provide those services.

5.2 Legal Obligation. Certain processing activities are required by the conditions of 777xp7's international gaming licence or by applicable law, including anti-money laundering (AML) requirements, counter-terrorism financing (CTF) obligations, and age verification mandates. 777xp7 is obligated to conduct these activities regardless of your consent.

5.3 Legitimate Interest. 777xp7 relies on legitimate interest as a legal basis for processing in limited circumstances, including fraud detection, platform security monitoring, and aggregate analytics. In each case, a legitimate interest assessment has been conducted to ensure that our interests are not overridden by your fundamental rights and freedoms.

5.4 Consent. Where we send you promotional communications or use non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for promotional communications does not affect your ability to continue using the Platform.

6.1 777xp7 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared only in the limited circumstances described below.

777xp7 engages trusted third-party service providers who process data on our behalf under strict contractual obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and debit card processing networks receive transaction data necessary to execute your deposit and withdrawal instructions.
• KYC & identity verification providers: Specialist verification services receive your identification documents and facial images to complete the KYC process required under our gaming licence.
• Game content providers: Third-party casino game studios integrated into the 777xp7 Platform may receive anonymised session data necessary to deliver their games.
• Customer support platforms: Our live chat and ticketing system provider processes communications data to facilitate support interactions.
• Cloud infrastructure providers: Our hosting and data storage infrastructure providers process data on secure servers as part of Platform operation.

777xp7 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, by the terms of our gaming licence, or in response to a valid legal process. Such disclosure will be made without prior notice to you where legally required or where advance notice would prejudice the purpose of the disclosure.

In the event of a merger, acquisition, restructuring, or sale of 777xp7's business or assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the acquiring entity's privacy practices before your data is transferred.

7.1 The 777xp7 Platform uses cookies and similar tracking technologies to deliver its services, remember your preferences, maintain your logged-in session, and gather aggregate usage statistics. Cookies are small text files stored on your device by your browser.

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your authenticated session and security tokens. These cannot be disabled without affecting core functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming limit configurations.
• Performance & Analytics Cookies: Collect anonymised data about how players interact with the Platform, which pages are visited most, and where errors occur, to help us improve our services.
• Marketing Cookies (Consent-Based): Used only where you have explicitly consented, to present relevant promotional offers within the Platform based on your gaming activity.

7.2 You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or through the cookie preference centre accessible via the Platform footer. Disabling strictly necessary cookies will impair the functionality of the Platform and may prevent login.

8.1 777xp7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below sets out our standard retention periods by data category.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised aggregate data may be retained indefinitely for statistical purposes.

9.1 777xp7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 777xp7 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Encryption at Rest: Sensitive personal data, including CNIC numbers, financial details, and KYC documents, is stored using AES-256 encryption.
• Access Controls: Personal data is accessible only to 777xp7 personnel who require it to perform their job functions. All staff with data access are subject to confidentiality obligations and undergo data protection training.
• Two-Factor Authentication (2FA): Internal systems holding player data are protected by multi-factor authentication. Players are encouraged to enable 2FA on their own Accounts.
• Regular Security Audits: The Platform undergoes periodic penetration testing and security assessments by independent specialists.
• Incident Response: 777xp7 maintains a documented data breach response procedure. In the event of a breach likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

9.2 Notwithstanding the above, no data transmission over the internet can be guaranteed to be completely secure. You use the Platform and transmit data at your own risk insofar as the transmission itself is concerned. Once your data is received by 777xp7, the security measures described above apply.

10.1 Subject to applicable law and the conditions of our gaming licence, you hold the following rights in respect of your personal data held by 777xp7. To exercise any of these rights, please contact the 777xp7 Data Protection team as set out in Clause 15.

• Right of Access: You may request a copy of the personal data 777xp7 holds about you, together with information about how it is processed. We will respond within thirty (30) days of a verified request.
• Right to Rectification: If any personal data held by 777xp7 is inaccurate or incomplete, you may request that it be corrected or updated. For certain identity data, documentary evidence of the correct information may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to override by legal retention obligations — for example, AML regulations require retention of transaction records for a minimum period regardless of an erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that 777xp7 limit the processing of your data while a dispute regarding its accuracy or the basis for processing is resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request a machine-readable export of the data you have provided to 777xp7.
• Right to Object: You may object to processing based on legitimate interest at any time. 777xp7 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce significant effects. Where such decisions occur in a fraud or AML context, you may request human review.

11.1 The 777xp7 Platform is strictly intended for individuals aged 21 years and above. 777xp7 does not knowingly collect personal data from any person under the age of 21. All Accounts are subject to age verification at registration and prior to any withdrawal being processed.

11.2 If 777xp7 discovers or has reasonable grounds to believe that an Account is held by a person under the age of 21, that Account will be immediately suspended, all balances will be frozen pending investigation, and the matter may be referred to the relevant authorities where required by law.

11.3 If you are a parent or guardian and believe that a minor has registered an Account on the 777xp7 Platform, please contact us immediately at the address in Clause 15. We will act promptly to verify the Account and take appropriate action, including permanent Account closure and deletion of any personal data belonging to the minor, subject to any applicable legal retention obligations.

12.1 The 777xp7 Platform is operated internationally. As a result, your personal data may be transferred to, stored in, or processed in jurisdictions outside of Pakistan, including the jurisdiction in which 777xp7 holds its international gaming licence.

12.2 Where personal data is transferred outside of Pakistan, 777xp7 ensures that appropriate safeguards are in place to protect that data, including contractual protections that require the recipient to handle your data to a standard consistent with this Privacy Policy.

12.3 By using the 777xp7 Platform and providing your personal data, you acknowledge and consent to the possibility of your data being transferred internationally as described in this clause.

13.1 The 777xp7 Platform integrates third-party game content from licensed casino game studios. While these providers are engaged under data processing agreements as described in Clause 6, their own privacy practices govern any data they collect independently through their game interfaces.

13.2 The Platform does not contain links to external third-party websites for commercial or advertising purposes. Where any such links exist for informational purposes, 777xp7 is not responsible for the privacy practices or content of those external sites. You access any external sites entirely at your own risk.

14.1 777xp7 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The effective date displayed at the top of this Policy will be updated upon each revision.

14.2 Where material changes are made, 777xp7 will notify registered players via the email address associated with their Account and/or through a prominent in-platform notification at least seven (7) days prior to the changes taking effect, except where immediate amendment is required by law.

14.3 Continued use of the 777xp7 Platform after the effective date of an amended Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

15.1 For any privacy-related enquiries, data subject access requests, or concerns about how 777xp7 handles your personal data, please contact our Data Protection team using the details below. All requests will be acknowledged within seventy-two (72) hours and substantively addressed within thirty (30) days.

15.2 If you are not satisfied with 777xp7's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority of the jurisdiction in which 777xp7 holds its gaming licence, or seek independent legal advice.