777xb Privacy Policy — How We Collect, Use & Protect Your Personal Data

This Privacy Policy is issued by 777xb ("777xb," "we," "us," or "our"), the operator of the online casino and sports betting platform accessible at 777xb.org (the "Platform"). For the purposes of data protection law, 777xb is the data controller in respect of all personal data collected through the Platform.

The 777xb platform is designed, operated, and maintained for use by adult players in Pakistan and other permitted jurisdictions. This Policy applies to all users of the Platform, including registered account holders and unregistered visitors who browse the Platform without creating an account. By accessing and using the 777xb Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy is to be read in conjunction with the 777xb Terms & Conditions, which govern your use of the Platform as a whole. Defined terms used in the Terms & Conditions carry the same meaning in this Policy unless otherwise stated.

2.1 Data You Provide Directly

When you register an account on 777xb, undergo KYC verification, make deposits or withdrawals, contact support, or interact with any feature of the Platform, you provide us with personal data directly. This includes your full legal name, date of birth, CNIC number and supporting documents, Pakistani mobile number, email address, and payment account details (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT wallet addresses).

2.2 Data Collected Automatically

When you access the 777xb Platform — whether via a browser on your smartphone in Karachi or a laptop in Lahore — certain technical data is collected automatically. This includes your IP address, device type and operating system, browser type, session timestamps, pages viewed, games accessed, and a city-level geolocation derived from your IP address. This data is collected via server logs and first-party cookies.

2.3 Data From Third Parties

777xb may receive personal data about you from third-party sources including: (a) identity verification and KYC service providers who confirm your CNIC against official records; (b) payment processors including JazzCash and EasyPaisa who confirm transaction status; (c) fraud prevention and AML screening services that cross-reference your data against industry risk databases; and (d) game software providers who log gameplay session data for fairness auditing purposes.

2.4 Legal Basis for Processing

777xb uses your personal data for the following specific, documented purposes:

• Account creation and management: To open, verify, maintain, and close your 777xb account, including processing identity verification using your CNIC and authenticating your login sessions;
• Processing deposits and withdrawals: To process PKR deposits via JazzCash, EasyPaisa, HBL, and other supported methods, and to execute withdrawal payments to your verified payment accounts;
• Providing gaming and betting services: To deliver casino games, live dealer tables, cricket betting markets (including PSL), and other platform features to your account;
• Fraud detection and AML compliance: To identify, investigate, and prevent fraud, money laundering, bonus abuse, underage gambling, multiple account creation, and other prohibited conduct;
• Responsible gaming: To monitor gaming patterns for potential problem gambling indicators, to action responsible gaming tool requests (deposit limits, self-exclusion, cooling-off periods), and to fulfil our player welfare obligations;
• Customer support: To respond to your queries, complaints, and disputes via live chat and email, in both Urdu and English;
• Legal and regulatory compliance: To maintain records and documentation required under applicable anti-money laundering laws, data protection legislation, and any regulatory obligations applicable to 777xb's operations;
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game library curation, and user experience for Pakistani players;
• Marketing communications (with consent only): To send you information about 777xb promotions, bonuses, and game launches via SMS or email, only where you have explicitly opted in to receive such communications. You may withdraw your consent at any time via Account Settings or by contacting support.

4.1 What Are Cookies?

Cookies are small text files placed on your device by the 777xb Platform when you visit. They serve important operational functions — maintaining your login session, remembering your game preferences, and enabling the Platform to function correctly across page loads. 777xb uses first-party cookies only; we do not place third-party advertising cookies that track you across other websites.

4.2 Types of Cookies Used

4.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to your 777xb account and using Platform features. Analytics and functional cookies can be disabled without affecting your ability to access the Platform, though some preference features may not work as expected.

777xb does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the following specific and necessary circumstances:

• KYC and identity verification providers: We share your CNIC details and supporting documents with approved identity verification service providers for the purpose of confirming your age, identity, and address as required by our compliance obligations. These providers process your data solely as our data processors and are bound by strict confidentiality and data protection obligations;
• Payment processors: We share necessary transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast to process deposits and withdrawals. These entities receive only the data required to execute the specific transaction and are regulated financial service providers;
• Game software providers: Our game providers receive anonymised session data for fairness auditing, RNG certification, and technical support purposes. They do not receive your personal identity information unless specifically required for a dispute investigation;
• Fraud prevention and AML screening services: We use industry-standard AML and fraud intelligence services to screen account activity. These services process your data strictly as processors acting under our documented instructions;
• Legal and regulatory authorities: We will disclose personal data to competent law enforcement, regulatory, or judicial authorities when required to do so by applicable law, court order, or binding regulatory requirement. 777xb will notify affected users where legally permitted to do so;
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of 777xb or its assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any material change to how your data is processed as a result.

The 777xb Platform operates with server infrastructure and third-party service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan, including countries where data protection standards may differ from those under Pakistani law.

Where personal data is transferred internationally, 777xb ensures that appropriate safeguards are in place to protect your data, including: contractual data protection clauses with receiving entities that impose obligations equivalent to those in this Policy; and selection of service providers that maintain internationally recognised data security certifications.

By using the 777xb Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above. You may request information about the specific safeguards in place for any international data transfer by contacting us via the email address in the footer of this page.

777xb retains personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, data is securely deleted using industry-standard data sanitisation methods or irreversibly anonymised so that it can no longer be associated with any individual player. Requests for early deletion are processed under Section 9 (Your Privacy Rights) below, subject to overriding legal retention obligations.

8.1 Technical Security Measures

777xb implements and maintains a comprehensive set of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and 777xb's servers;
• Encryption at rest for all stored personal data including KYC documents and financial records;
• Role-based access controls restricting employee access to personal data to those who require it for their specific job function;
• Multi-factor authentication required for all 777xb staff accessing production systems containing player data;
• Continuous intrusion detection and security monitoring of all Platform infrastructure;
• Regular independent security assessments and penetration testing of Platform systems.

8.2 Organisational Security Measures

In addition to technical controls, 777xb maintains organisational security practices including: mandatory data protection training for all staff who handle personal data; documented data handling procedures and access policies; a formal data breach response procedure with defined notification timelines; and regular review of third-party processor security standards before and during engagement.

8.3 Your Responsibility

While 777xb takes extensive measures to secure your personal data on our systems, you are also responsible for protecting access to your 777xb account. You must maintain the confidentiality of your login credentials, enable SMS two-factor authentication, and notify 777xb immediately if you suspect any unauthorised access to your account. 777xb is not liable for data exposure resulting from your failure to maintain the security of your own credentials or devices.

8.4 Data Breach Notification

In the event of a data security breach that poses a significant risk to your rights and freedoms, 777xb will notify affected players without undue delay, providing information about the nature of the breach, the data affected, the likely consequences, and the steps 777xb is taking in response. Notification will be made via the email address registered to your account.

As a 777xb player, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting 777xb's Data Protection team via the email address in the footer of this page:

• Right of access: You have the right to request a copy of all personal data 777xb holds about you, together with information about how it is processed. We will respond to verified access requests within 30 calendar days at no charge;
• Right to rectification: If any personal data held by 777xb about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account details can be updated directly in Account Settings; KYC document corrections require contact with our support team;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been unlawfully processed. Note that this right is subject to overriding legal retention obligations — for example, AML law requires us to retain KYC and transaction records for defined periods even after account closure;
• Right to restriction of processing: You may request that processing of your data be restricted in certain circumstances, such as where you contest the accuracy of data pending verification, or where you have objected to processing pending our determination of your objection;
• Right to data portability: Where processing is based on contract performance or your consent and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: You have the right to object to processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where we process your data based on your consent (notably for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Marketing preferences can be managed via Account Settings or by contacting support.

The 777xb Platform is strictly restricted to adults aged 21 years and above. 777xb does not knowingly collect, process, or retain personal data from individuals under the age of 21. The collection of personal data from minors is not permitted under these Privacy Policy terms or under the 777xb Terms & Conditions.

CNIC-based age verification is mandatory during the account registration process. Any account found to have been registered by or operated on behalf of a person under the age of 21 will be immediately closed, all personal data associated with the account will be deleted (subject to any overriding legal obligation to retain specific records as evidence of the breach), and the matter may be escalated to relevant authorities in appropriate circumstances.

If you are a parent or guardian and believe that a person under 21 in your household has created a 777xb account, please contact our support team immediately via live chat or the email address in the footer. We will investigate and take appropriate action promptly.

777xb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or Platform features. All amendments will be published at 777xb.org/privacy-policy with the updated effective date displayed at the top of the page and in the banner immediately above this Policy.

Where changes to this Privacy Policy are material — that is, where they significantly alter how your personal data is processed, who it is shared with, or what rights you have — 777xb will provide advance notice to registered players via the email address associated with their account at least 14 days before the amended Policy takes effect. Minor amendments, including corrections of typographical errors and administrative updates, may take effect immediately without advance notice.

We encourage all 777xb players to review this Privacy Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept amended terms, you must close your account before the amended Policy takes effect by contacting 777xb support.

12.1 How to Contact Us

For any questions about this Privacy Policy, requests to exercise your privacy rights, or concerns about how 777xb handles your personal data, please contact the 777xb Data Protection team. The contact email address is displayed as plain text in the footer of every page on this site (not as a clickable link): [email protected].

Our support team is available via live chat 24 hours a day, 7 days a week, in both Urdu and English, with an average initial response time of 3–5 minutes. For formal privacy requests and data subject rights exercises, written correspondence via email is preferred to create a clear audit record.

12.2 Response Timelines

777xb will acknowledge all privacy-related correspondence within 2 business days of receipt. Substantive responses to data access, correction, deletion, and objection requests will be provided within 30 calendar days of identity verification. Where a request is complex or involves a high volume of data, we may extend this period by a further 30 days with written notice to you.

12.3 Privacy Complaints

If you are not satisfied with our response to your privacy query or rights request, you have the right to escalate your complaint to the 777xb Compliance team, which will conduct an independent review and issue a final decision within 28 days. Should you remain unsatisfied following this internal escalation, you have the right to raise your complaint with the relevant data protection supervisory authority applicable to your jurisdiction.